[stunnel-users] Certificates and public/private keys
dario.mariani at sun-cs-italy.com
Thu Jun 28 22:57:17 CEST 2007
Il giorno 27/giu/07, alle ore 13:38, Dario Teixeira ha scritto:
> Thanks for the reply! I didn't mention it before, but I won't be
> Apache or any other mainstream webserver. Most likely I will be using
> Ocsigen (http://www.ocsigen.org/). Now, the latest development
> of Ocsigen already has basic support for SSL, but it can't handle yet
> client authentication. In short, I am still looking for an stunnel-
> solution. Any ideas?
You can generate a certificate (and his private key) for every
client, put the public cert in the CApath of the server, and set
In every CApath you must have:
- the pub cert of the CA that issues the certs
- the pub cert of the OTHER hosts which you will establish a
connection (so, in the server CApath you will find the client certs,
Then you do a c_rehash.
With this setup, i don't know if it will work with the ssl provided
by the browser, or you must install stunnel also on the server side,
but i think that accepting the cert on the browser will work for you.
More information about the stunnel-users