Is there a way to configure stunnel just to check the public key of the provided certificate?  I want authentication between the server and the client to take place by public key only, no PKI just like ssh.  Is this possible?  Is this verify level 4, or does that still check the CN against the host that I am connecting to?

Michael Power