Koozali.org: home of the SME Server

FreeSSL

Ruusvuu

FreeSSL
« on: April 25, 2003, 01:21:08 AM »
Just came to my attention:

http://freessl.com

Guck Puppy

Re: FreeSSL
« Reply #1 on: April 26, 2003, 02:44:01 AM »
Thanks for this tip Ruusvuu! 30 mins, following the howto at :

http://www.v-cut.com/SME/HowTo/SSL-Certificates-on-SME.htm

and I had the certificate in place - for $0!

Only thing to be wary of, if you choose the "secure" way of password protecting your private key, it appears apache will prompt for that password whenever it's (re)started.

I guess this could be an issue if I ever wanted an automated, unattended reboot of the system for some reason...

Cheers,

G

Ruusvuu

Re: FreeSSL
« Reply #2 on: April 28, 2003, 10:06:26 PM »
Relative to these certs, I have installed one for a virtual domain.

Galeon did not have a problem with this, but IE warned about about the primary cert and once rejected, accepted the right cert.

Anyone know of a way to make IE recognize the right cert right off the bat?

Bill Talcott

Re: FreeSSL
« Reply #3 on: April 28, 2003, 11:09:26 PM »
Ruusvuu wrote:
>
> Relative to these certs, I have installed one for a virtual
> domain.
>
> Galeon did not have a problem with this, but IE warned about
> about the primary cert and once rejected, accepted the right
> cert.
>
> Anyone know of a way to make IE recognize the right cert
> right off the bat?

This has been covered before. The initial SSL connection is made before the server determines that it's for a virtual domain.

Morten U. Hansen

Re: FreeSSL
« Reply #4 on: December 01, 2003, 06:29:03 PM »
Hi Guck Puppy

Thanks for above info. I have followed the How-to and installed the certificate. I do however still get the annoying warnings when I check mail in Outlook-Express. What can I do to remove these warnings (one per mail account on the SME server).?

Thanks Morten

Guck Puppy

Re: FreeSSL
« Reply #5 on: December 01, 2003, 09:38:36 PM »
Morten U. Hansen wrote:

> installed the certificate. I do however still get the
> annoying warnings when I check mail in Outlook-Express. What
> can I do to remove these warnings (one per mail account on
> the SME server).?

Apples and Oranges here... retrieving mail from your SME server and adding a certificate to your SME's webserver are two separate issues.

So I guess you have setup secure email retrieval for your server?

The key is that the 'common name' on the certificate you got must be the same as the server name OE is using to access your secure mail port (for example, www.yourdomain.com, unless the certificate specifically says "mail.yourdomain.com").

So long as you have added the certificate to the securemail process there should be no warnings...

The only other suggestion I can make is to make sure you have the 'root certificates' update for windows which is available from windowsupdate.

G