Thank you Michal, But in this case it does not get the certificate (for some reason).
#Working configuration (based on certificate-file) : debug = 7 cert = c:\test1.pem CAfile = c:\cacert.pem verify = 2 options = NO_TLSv1.1 [test] engineId = capi client = yes accept = 0.0.0.0:9001 connect = 1.2.3.4:9000 #Not-Working configuration (based on CAPI; c:\test1.pem is imported under Personal\Certificates): debug = 7 engine = capi engineCtrl = debug_level:2 engineCtrl = debug_file:c:\keys\capi.txt engineCtrl = store_name:Personal CAfile = c:\cacert.pem verify = 2 options = NO_TLSv1.1 [test] engineId = capi client = yes accept = 0.0.0.0:9001 connect = 1.2.3.4:9000 #Content of capi.txt Setting debug file to c:\keys\capi.txt Setting store name to Personal Opening certificate store MY On Thu, Feb 18, 2016 at 11:38 AM, Michal Trojnara < [email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 18.02.2016 10:26, Shay Cohen wrote: > > I am trying to configure one of my clients to use 'engine = capi', > > but cannot find a way to define which Key to actually use. > > With the CAPI engine you don't need to manually select the client key > to use. The client key is automatically selected based on the list of > CAs trusted by the server. > > Best regards, > Mike > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJWxZEOAAoJEC78f/DUFuAUJ7YP/A7fzgmI8dKdKlb0jm2olbjS > PxtUaPSwog6M8uNMXV88dyvJAaDn+KrxHPXXWzw6z+0bca+Cj4ddrn32mc5eJIfC > 0QCXR/0uId5C6xLgOgq/3fW/MFkLRCLrHqVgm/Wzp3CRLUAB1D3HWOyFK3JezegN > nAbULf03UFaBJjj3xI9YHBJonJu+emwQI00sNvmTVc26lq1hVwAISlvDAEvWwyPy > zhT+j2ao0d2+jYln93Klxl85PbF+ybacewODRsZVdrnJN6YoxRrhRmhMTnzHBUCo > u5oAGfyg77sBsivBS4M6NLik62off+Lkvlj0TzkjnDewHBcm67nigOdiVa3Lx6c6 > Nzhdk2fFiqf4mGN50gsITOoyqPNkfWSdjFeyWAOFU1DMILFn0Um8FVg2fd05LqPN > XBg7UVj8Jt4r8dCZvVQCNMAhEb7xfHlDdo63J7qzQF9bq6hpMvsDWx1dUyGA1Nvb > 49ii4ScLNlHQ0Lh6e/4Lc2z+XuOr1gZyuRYfAfpkcd3g3mjPWblAYhqAkTUpqPT3 > qiDM6ub9qhFNzoebuXPVi7zjPHibnRM5SHJDJAR5zMyyOv4IdvroUY5Z8TY1MAp6 > lIuD8dHzkI7prTRTNiFxPdmWtBUGWLsO1fceHGxvEeRo5kVGZ2HL24g8yNefslXX > CCXEp0B0O5wFFldy2gYk > =fcHM > -----END PGP SIGNATURE----- > _______________________________________________ > stunnel-users mailing list > [email protected] > https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users >
_______________________________________________ stunnel-users mailing list [email protected] https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
