[stunnel-users] Verify = 3 and Giganews

Thomas Eifert kxkvi at wi.rr.com
Thu Jan 12 21:36:54 CET 2012


Hello,

I've tried to use verify = 3 with Giganews on several occasions now, but
it always fails.   It works fine with other servers, however.  Here is 
the debug
output for the Giganews scenario:

2012.01.12 14:05:01 LOG4[292:3840]: CERT: Verification error: unable to 
get local issuer certificate
2012.01.12 14:05:01 LOG4[292:3840]: Certificate check failed: depth=1, 
/C=US/O=GeoTrust Inc./OU=Domain Validated SSL/CN=GeoTrust DV SSL CA
2012.01.12 14:05:01 LOG3[292:3840]: SSL_connect: 14090086: 
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 
verify failed

And the following is from my stunnel.conf:

~~~~~~~~~~~~~~~~~~~~~~~~~~~

debug = 6
delay = yes

[nntps.3]
client = yes
sslVersion = TLSv1
ciphers = AES256-SHA
cafile = peer-nntps.3.pem
verify = 3
accept = 127.0.0.1:119
connect = news.giganews.com:443

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

As I have with other connections, I am saving peer-nntps3.pem
from the log window menu.

Can anyone tell me why this is failing on this server only?

Regards;

Thomas



More information about the stunnel-users mailing list