On Thursday, July 18, 2002, at 11:27 , Matt Peterson wrote:

> doesn't like self-signed certificates.  I
> attempted to use a real signed SSL cert, but courier-imapd barfed on
> that.  Does anyone offer signed TLS certs?  Verisign and Thawte don't
> seem to advertise this product.  Anyhows, back to plaintext IMAP for
> their cranky MUA's.

If no one does, nothing stops you from setting up your own CA. 
OpenSSL makes it fairly easy, and there is even a CA.sh script 
which makes it easy.

Then just import the CA certificate, in either PEM or DER 
format, to all the clients. If you download it over the web (its 
a public key, so making it public is fine) IE will even offer to 
do this for you.

http://ca.gearboxx.net/ has my CA certificate, if you want to 
see what it looks like. Maybe you just need to import your 
self-signed cert into the root store by opening the PEM or DER 
file?

--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless

Reply via email to