title: stunnel certificate verification
body: <p>I am trying to setup stunnel with certificate verification. I have put <code>verify = 1</code> in <code>stunnel.conf</code>.</p>
  
  <p>I generated a certificate for STunnel server and client and signed with CA (CA setup in lab) :</p>
  
  <pre><code>openssl req -out stunnel.csr -new -newkey rsa:2048 -nodes -keyout stunnel.key
  scp stunnel.csr root@&lt;CA IP Address&gt;:/etc/pki/CA/csr/
  openssl ca -extensions v3_ca -days 3650 -in csr/stunnel.csr -out certs/stunnel.pem
  cat stunnel.key &gt;&gt; stunnel.pem
  </code></pre>
  
  <p>But when I use this cert I get error:</p>
  
  <pre><code>2014.05.07 17:01:56 LOG4[8343:140373923505920]: VERIFY ERROR: depth=1, error=unable to get issuer certificate: /C=US/ST=California/O=Org/OU=OrgUnit TLM/CN=CAHost
  2014.05.07 17:01:56 LOG3[8343:140373923505920]: SSL_accept: 140890B2: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
  2014.05.07 17:01:56 LOG5[8343:140373923505920]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
  </code></pre>
  
  <p>What is going wrong here ?</p>