diff --git a/roles/postfix/templates/stunnel.conf.j2 b/roles/postfix/templates/stunnel.conf.j2
index 1862909..09229c1 100644
--- a/roles/postfix/templates/stunnel.conf.j2
+++ b/roles/postfix/templates/stunnel.conf.j2
@@ -5,3 +5,5 @@ pid =
 accept = localhost:2525
 client = yes
 connect = {{ mail_server }}:465
+CAfile = {{ tls_bundle }}
+verify = 2