Доброго всем.
Настраиваю stunnel для авторизации к pop3 через сертификаты. Серты самоподписанные.
Что бы не делал, в логах stunnel постоянно одно и тоже: SSL_accept: 140890C7: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate
Сертификаты проверил:openssl verify -CAfile ca.pem client.pem все ОК.

Конфиг stunnel:
cert = /usr/local/etc/stunnel/stunnel.pem
;key = /usr/local/etc/stunnel/server.pem
; Protocol version (all, SSLv2, SSLv3, TLSv1)
sslVersion = all
chroot = /var/tmp/stunnel
setuid = stunnel
setgid = nogroup
pid = /stunnel.pid

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
; Authentication stuff
verify = 3
; Don't forget to c_rehash CApath
; CApath is located inside chroot jail
;CApath = /usr/local/etc/stunnel/certs
CApath = /certs
; It's often easier to use CAfile
CAfile = /usr/local/etc/stunnel/ca.pem
; Don't forget to c_rehash CRLpath
; CRLpath is located inside chroot jail
;CRLpath = /crls
; Alternatively you can use CRLfile
;CRLfile = /usr/local/etc/stunnel/crls.pem
; Some debugging stuff useful for troubleshooting
debug = 7
output = /var/log/stunnel.log
[pop3]
accept  = 123.123.123.123:995
connect = 192.168.1.1:110

Подскажите где грабля?