[stunnel-users] Problem with 2048 bits SSL sertificate with stunnel
gogo at dirbg.com
Mon Aug 23 13:48:12 CEST 2010
Hello to all,
We get 2048 bits wildcard certificate for our domain *.domain.com .. And we
are using thawte as Certificate Authority . So they send as two certificates
One for SSL web and one intermediate certificate ..
The stunnel configuration is :
cert = /etc/stunnel/domain.crt
CAfile = /etc/stunnel/domain.intermediate.crt
key = /etc/stunnel/domain.key.nopass
verify = 0
accept = x.x.x.x:443
connect = x.x.x.x:81
even I use verify = 0 some of our clients still complains that on some pages
( like blabla.domain.com ) server wants some of their private certificate to
be send to the server !!
and it's happens only with Internet Explorer 8.0 without verify and CAfile
commands IE 8.0 works fine but Mozilla Firefox claim that can find CA be
wildcard certificate cannot be reissued with 1024 bits key . So is there
some mistake in my configuration ?
If not what can I do about it ?
Thanks in advance ..
P.S.: version of stunnel is 4.20 with XForwardedFor patch ..
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the stunnel-users