Вечер добрый в гайде сказанно: Запишем все клиентские сертификаты в clients.crt. Вот что должно примерно получиться:
/etc/stunnel/clients.crt ### eakj-desktop -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
### eakj-mobile -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----
Я не понимаю как я должен их записать. Что должно быть между begin и end?
systemctl status stunnel
● stunnel.service - TLS tunnel for network daemons
Loaded: loaded (/usr/lib/systemd/system/stunnel.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Wed 2019-02-06 20:30:03 MSK; 14h ago
Process: 14107 ExecStart=/usr/bin/stunnel (code=exited, status=1/FAILURE)
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [ ] Cron thread initialized
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [ ] Private key loaded from file: /etc/stunnel/stunnel-server.key
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [ ] Private key check succeeded
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [!] error queue: B084009: error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [!] SSL_CTX_load_verify_locations: 906D064: error:0906D064:PEM routines:PEM_read_bio:bad base64 decode
Feb 06 20:30:03 tolstoialeksandr.example.com stunnel[14107]: [!] Service [openvpn]: Failed to initialize TLS context
Feb 06 20:30:03 tolstoialeksandr.example.com systemd[1]: stunnel.service: control process exited, code=exited status=1
Feb 06 20:30:03 tolstoialeksandr.example.com systemd[1]: Failed to start TLS tunnel for network daemons.
Feb 06 20:30:03 tolstoialeksandr.example.com systemd[1]: Unit stunnel.service entered failed state.
Feb 06 20:30:03 tolstoialeksandr.example.com systemd[1]: stunnel.service failed.
Так же не могу понять в чем ошибка.
