[prev in list] [next in list] [prev in thread] [next in thread] 

List:       stunnel-users
Subject:    Re: [stunnel-users] The verify=3 option in client mode
From:       Philipp Hartwig <philipp.hartwig () uni-due ! de>
Date:       2011-04-09 11:33:20
Message-ID: 20110409113320.GL1983 () debian
[Download RAW message or body]

After looking at the source code I think I understand it: Stunnel does 
not really compare the peer's certificate with the locally installed 
certificate but it only compares their subjects.

If my interpretation is correct maybe the documentation of the "verify" 
option
> level 3 - verify peer with locally installed certificate
should state this? At least I was expecting a stricter form of 
verification.
_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
http://stunnel.mirt.net/mailman/listinfo/stunnel-users
[prev in list] [next in list] [prev in thread] [next in thread]