Multiple certificates with same hash

Marco Göbel <[email protected]> Tue, 23 Jul 2019 08:28:09 +0200
Newsgroups gmane.network.stunnel.user
Organization B1 Systems GmbH
Message-ID <[email protected]>
Hi,

we use c_rehash to upgrade client certificates and we have multiple
certificates with the same hash (e.g. same subject but different
start-/end validity) like:

ee98f073.0
ee98f073.1
ee98f073.2

The man-page description for the CApath option seems to be correct what
stunnel will do:

>Note that the certificates in this directory should be named XXXXXXXX.0
>where XXXXXXXX is the hash value of the DER encoded subject of the cert.

It seems only certificates with the ending .0 is used by stunnel and the
others certificate hashes with higher numbers are never used/read. Can
you confirm?

Any idea how to use all certificates with stunnel?

BTW. we tested with version 4.56 and latest 5.5

Regards,
Marco

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users