[stunnel-users] "choose a digital certificate" pop-up in IE

Wed May 19 14:30:14 CEST 2010

Hello

I have browsed the archives but have not found the answer to this
question...

I have stunnel set up to handle https connections. It sits on a Debian
server alongside HAProxy and works fine with every browser except for
Internet Explorer.

When I connect with Internet Explorer, I get a blank "Please choose a
digital certificate" pop-up.

How do we turn off the request for the client certificate in IE?

Here are my details....thanks in advance.

#vi /etc/stunnel/stunnel.conf
verify=0
CAfile=/etc/ssl/certs/chain.pem
cert=/etc/ssl/certs/multidomain.pem
CApath=/etc/ssl/certs/

pid = /etc/stunnel/stunnel.pid
debug = 3
output = /etc/stunnel/stunnel.log

socket=l:TCP_NODELAY=1
socket=r:TCP_NODELAY=1

client=no

[https]
accept=192.168.11.32:443
connect=localhost:444
TIMEOUTclose=0
xforwardedfor=yes

#usr/local/bin/stunnel -version
stunnel 4.32 on x86_64-unknown-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007
Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6

Global options
debug           = daemon.notice
pid             = /usr/local/var/run/stunnel/stunnel.pid
RNDbytes        = 64
RNDfile         = /dev/urandom
RNDoverwrite    = yes

Service-level options
cert            = /usr/local/etc/stunnel/stunnel.pem
ciphers         = AES:ALL:!aNULL:!eNULL:+RC4:@STRENGTH
session         = 300 seconds
stack           = 65536 bytes
sslVersion      = SSLv3 for client, all for server
TIMEOUTbusy     = 300 seconds
TIMEOUTclose    = 60 seconds
TIMEOUTconnect  = 10 seconds
TIMEOUTidle     = 43200 seconds
verify          = none

-- 
View this message in context: http://old.nabble.com/%22choose-a-digital-certificate%22-pop-up-in-IE-tp28607531p28607531.html
Sent from the Stunnel - Users mailing list archive at Nabble.com.