<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.gmail-tlid-translation
{mso-style-name:gmail-tlid-translation;}
span.gmail-
{mso-style-name:gmail-;}
span.gmail-tlid-translation-gender-indicator
{mso-style-name:gmail-tlid-translation-gender-indicator;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I believe the configuration would be the same for client or server, and for sure the windows cert store is used for both scenarios. (I use it in other solutions, but no idea how to configure stunnel to use it
<span style="font-family:"Segoe UI Emoji",sans-serif">☹</span> )<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-jon<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>From:</b> Flo Rance <trourance@gmail.com> <br>
<b>Sent:</b> Wednesday, December 12, 2018 11:07 AM<br>
<b>To:</b> Chicoine, Jonathan <Jonathan.Chicoine@allscripts.com><br>
<b>Cc:</b> stunnel-users@stunnel.org<br>
<b>Subject:</b> Re: [stunnel-users] How to configure STunnel to use cert. from certificate store<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Windows certificates store is used to perform client authentication.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span class="gmail-">A quick search leads to the following results</span>:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://secure-web.cisco.com/1wPNVT7nm9kuah2xWpBSBKILkCB1LQoiUuC9lYEN0-Zx3DXWbzU-CGe2xgayZisvqPZCdYSZL2SPIhs3mrvHGisZJSDQerBd-y8pWQ7xvt-mY5zP2HqhAPU9-ML2INGiIkXlNOEE2MZWIBO_vOnkxHxRoJgnxbMQWF2DfF02WXDzf4brxIPxQOd83hPvPboKNbwL-MhhK-dq-VNNfPBojPXFG1cZF5GVur70cJl97dmSYJir_DRAH9A2ffDhstVWPcWtcowHcJXtAxsxweWDZyWLEP09XScbgJermsUaNVzsqgGOKqeEwgFvRUGf_ln8FnPau9DVeb8K3qf1DhXUB5qw1MtHka-1nGXHUY4iyjU1Bm97ee6djNGOVMGJaVeeYksV-V0REux1dxNSovILr990cAx-VDCXE9d6XYL1lSj_MbkLrdQRnky8sk3I-uiN7/https%3A%2F%2Fwww.stunnel.org%2Fpipermail%2Fstunnel-users%2F2014-August%2F004684.html">https://www.stunnel.org/pipermail/stunnel-users/2014-August/004684.html</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://secure-web.cisco.com/1bY9Lg06G6WjOJNt2Cs2WFEmaPyTIRsqnk8tzq63yfpAnnnMm4FZMtRyb9knNMyZPRRh1FzEWEYY8h1m3MKdWlC14_r-XeUz_fzyxNro60mmgydK8BfmmZ9mSNa4ktketXBM3DvVcPTCQ0kYZn1SVnON4umOcWvJlgS5IFMyOyljN_J8GutamFmfkTjvmxpHWFdBpXja3fFimzcs9n4L2cQYSLH1V5g-IyyAaMeeXvhJYzgiUJV-aYrtsTGOsbHCTutGHc4QEDdPlUrOxeCA9RGs0O1s8CSEeCLrQaeoX26t8VStX5Urnpgo1jL6lTkkFUywbZ_HcE5L1zTg_DF7t3N3q7qgdT_PCpudbwzPXeK2k58sJV3jTH9rjq6nYls_FK0YTrK9EuCGDGPk8Emb1bgCasRW_lv_BNqYbGDYwnG4xCJk_tNnyf50bCUS5MYCc/https%3A%2F%2Fwww.stunnel.org%2Fpipermail%2Fstunnel-users%2F2016-March%2F005415.html">https://www.stunnel.org/pipermail/stunnel-users/2016-March/005415.html</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Please note, I don't use Windows at all.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Flo<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Dec 12, 2018 at 3:52 PM Chicoine, Jonathan <<a href="mailto:Jonathan.Chicoine@allscripts.com">Jonathan.Chicoine@allscripts.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">How in the word you specify the certificate to use from the windows certificate store (for example, on Windows 10 or Windows Server 2012)?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The documentation obviously says to use the “cert” config option to specify a file (and the “key” config option for the private key) … but to use a cert from the windows certificate
store, shouldn’t it be the certs “common name” field or thumbprint … or something.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Am new to this whole thing and have been googling for the answer for days.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Any help would be greatly appreciated.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">-jonathan<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<a href="https://secure-web.cisco.com/1p4enL6mQAuLTYQRkn6tkgqPIJqXIwDRQpUblcg5aKOViGrXR5cyFhv9s9qaRPPVnXjr-3Ic81L66cFuqX0g90LAq1WGrQrnLK_-wyvsGFeIqlqp039Rz-32DZ9B3XsJgrzWI_Jrz7FJgkGe92tJmRiHbvbuKmmCeETvFfrikKIPun9GoYb_OmAYC_5sxZ6pTJCSk07UikN_qegUvOjkyHTKwuMpXnGjOk4JXhtOsw1uv0Gk3iTMpAowWTnZw8b1sb7k4zrcLYneii5PnlNbBwNacAFDbtum98DzPDSV7LP8nYAZ-wymAHNVsBl9VXrA7h6oA9aZ02EYkzjI2iLekw0OWbOjpQPJKWNvA_CQJSr_dzTbLHx9j9wFW3gwcmGaRXPDO881_NuWjz-zeBrPdityA8Yrl7FCEUHwCyNEmtKLCKjuIWvKQGEangpyAsWOb/https%3A%2F%2Fwww.stunnel.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fstunnel-users" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</body>
</html>