Abdel,

I would do it like this:

1. In your cpanel.pem you should place only the host cert and key. 2. Uncomment your CAPath sentence. 3. Put rapidssl intermediate and root certs in /etc/stunnel/rapidssl 4. Run c_rehash . in /etc/stunnel/rapidssl

Let me know how it goes.

-----Original Message----- From: Abdelkarim Mateos Sanchez [email protected] Sender: [email protected] Date: Tue, 08 Feb 2011 10:01:46 To: [email protected] Reply-To: [email protected] Subject: [stunnel-users] Using CA intyermediate on stunnel problem

Hi.

We are using RapidSSL certificate for my hosts.

We are using stunnel for ASSP (AntiSpam Proxy System)

We are trying use this certificate but get some errors. We are looking for solution but problem persist,

cert = /etc/stunnel/cpanel.pem chroot = /usr/local/cpanel/var/run/stunnel-assp/ pid = /stunnel.pid setuid = stunnel setgid = stunnel output = /var/log/stunnel.log [ssmtp] accept = 465 connect = 127.0.0.2:26 #CAfile = /etc/stunnel/cpanel.cabundle #CApath = /etc/stunnel/rapidssl/

When try connect get this error

depth=0 /serialNumber=cso/HwRW/nTj87jIivvttDvfpI7rUt2c/C=ES/O=genesis.islaserver.com/OU=GT15685418/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated - RapidSSL(R)/CN=genesis.islaserver.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /serialNumber=cso/HwRW/nTj87jIivvttDvfpI7rUt2c/C=ES/O=genesis.islaserver.com/OU=GT15685418/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated - RapidSSL(R)/CN=genesis.islaserver.com verify error:num=27:certificate not trusted verify return:1 depth=0 /serialNumber=cso/HwRW/nTj87jIivvttDvfpI7rUt2c/C=ES/O=genesis.islaserver.com/OU=GT15685418/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated - RapidSSL(R)/CN=genesis.islaserver.com verify error:num=21:unable to verify the first certificate verify return:1

Of /etc/stunnel/cpanel.pem there're

KEY and CERT for host CA intermediate certificate for RapidSSL

I'm lost.

Apreciate help.