Re: [stunnel-users] VeriSign Intermediate CA Certificate issue.

Guys, I have solved this issue. I was copy-pasting the wrong
intermediate certificate. It is working fine now.

Thank you so much!
unai

Unai Rodriguez wrote:
> Dear All,
>
> I am trying to set an https layer using stunnel. I am having problems
> with the intermediary certificate since it appears broken to the user.
> You may find a screenshot here:
>
> http://u-journal.org/stunnel/Root_Cert_Err.jpg
>
> My stunnel version is: 3.26 running on Debian 3.1
>
> I run stunnel as standalone with this parameters:
>
> stunnel -d 10.123.16.103:443 -D 7 -R /etc/ssl/certs/stunnel.rnd \
> -p /etc/ssl/certs/stunnel.pem -o /var/log/stunnel/stunnel.log \
> -r 10.123.16.103:80 -N https
>
> You may find the output of my stunnel -V here:
> http://pastebin.ca/793495
>
> uname -a: Linux lb2-dp-vm 2.6.8-3-686 #1 Tue Dec 5 21:26:38 UTC 2006
> i686 GNU/Linux
>
> openssl version: OpenSSL 0.9.7e 25 Oct 2004
>
> So, if I create my /etc/ssl/certs/stunnel.pem file like this:
>
> -----BEGIN RSA PRIVATE KEY-----
> rsa_priv_key
> -----END RSA PRIVATE KEY-----
>
> -----BEGIN CERTIFICATE-----
> secured.behringer.com_certificate
> -----END CERTIFICATE-----
>
> -- OR --
>
> -----BEGIN RSA PRIVATE KEY-----
> rsa_priv_key
> -----END RSA PRIVATE KEY-----
>
> -----BEGIN CERTIFICATE-----
> secured.behringer.com_certificate
> -----END CERTIFICATE-----
>
> -----BEGIN CERTIFICATE-----
> VeriSign Intermediate CA Certificate
> (https://www.verisign.com.sg/support/...e/secure.shtml)
> -----END CERTIFICATE-----
>
> I get the mentioned error. If I create the /etc/ssl/certs/stunnel.pem
> like this:
>
> -----BEGIN RSA PRIVATE KEY-----
> rsa_priv_key
> -----END RSA PRIVATE KEY-----
>
> -----BEGIN CERTIFICATE-----
> VeriSign Intermediate CA Certificate
> (https://www.verisign.com.sg/support/...e/secure.shtml)
> -----END CERTIFICATE-----
>
> -----BEGIN CERTIFICATE-----
> secured.behringer.com_certificate
> -----END CERTIFICATE-----
>
> I get the error:
> "[...] X509_check_private_key:key values mismatch"
>
> You may see the log here:
> http://pastebin.ca/793500
>
> Any clues on what am I doing wrong?
>
> Thank you so much!
> unai
> _______________________________________________
> stunnel-users mailing list
> stunnel-users@mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
_______________________________________________
stunnel-users mailing list
stunnel-users@mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users