Hi,

The problem seems to be the line before: "Rejected by OCSP".

You can try to put the option: *OCSPaia* = no

https://www.stunnel.org/static/stunnel.html

Regards, Flo

On Fri, Nov 9, 2018 at 12:14 PM Alix Janeth Jerez [email protected] wrote:

Hi,

I have installed the last stunnel version 5.4.9, i get this fatal error

*The stunnel.conf is configured so:*

debug = 7 output = stunnel.log

# GLOBAL OPTIONS client = yes taskbar=yes [SMTP Outgoing] protocol = smtp accept = 172.31.41.84:117 connect = smtp.outlook.com:587 checkHost = smtp.outlook.com verifyChain = yes CAfile = ca-certs.pem OCSPaia = yes cert = stunnel.pem

*I tried to enable this option*

; Enable support for the insecure SSLv3 protocol options = -NO_SSLv3

But stunnel does't work.

*Thank you in advance for your help.*

Best regards,

---

stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

Hi,

But that's weird, because it seems that there's suddenly a problem with those microsoft certificates and OCSP (or digicert).

I don't use it, so I can't give much more details, but it needs some further investigations, because I'm not sure if it's a good permanent solution.

Regards, Flo

On Fri, Nov 9, 2018 at 12:47 PM Alix Janeth Jerez [email protected] wrote:

Good morning Flo

Thank you so so so so so much. You are great !!! It works

Best regards,

---

*De:* Flo Rance [email protected] *Enviado:* viernes, 9 de noviembre de 2018 11:40 *Para:* Alix Janeth Jerez *Cc:* [email protected] *Asunto:* Re: [stunnel-users] Please need urgent help

Hi,

The problem seems to be the line before: "Rejected by OCSP".

You can try to put the option: *OCSPaia* = no

https://www.stunnel.org/static/stunnel.html

Regards, Flo

On Fri, Nov 9, 2018 at 12:14 PM Alix Janeth Jerez [email protected] wrote:

Hi,

I have installed the last stunnel version 5.4.9, i get this fatal error

*The stunnel.conf is configured so:*

debug = 7 output = stunnel.log

# GLOBAL OPTIONS client = yes taskbar=yes [SMTP Outgoing] protocol = smtp accept = 172.31.41.84:117 connect = smtp.outlook.com:587 checkHost = smtp.outlook.com verifyChain = yes CAfile = ca-certs.pem OCSPaia = yes cert = stunnel.pem

*I tried to enable this option*

; Enable support for the insecure SSLv3 protocol options = -NO_SSLv3

But stunnel does't work.

*Thank you in advance for your help.*

Best regards,

---

stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users