[stunnel-users] Multiple certificates with same hash

Marco Göbel goebel at b1-systems.de
Tue Jul 23 08:28:09 CEST 2019


we use c_rehash to upgrade client certificates and we have multiple
certificates with the same hash (e.g. same subject but different
start-/end validity) like:


The man-page description for the CApath option seems to be correct what
stunnel will do:

>Note that the certificates in this directory should be named XXXXXXXX.0
>where XXXXXXXX is the hash value of the DER encoded subject of the cert.

It seems only certificates with the ending .0 is used by stunnel and the
others certificate hashes with higher numbers are never used/read. Can
you confirm?

Any idea how to use all certificates with stunnel?

BTW. we tested with version 4.56 and latest 5.5


More information about the stunnel-users mailing list