Koozali.org: home of the SME Server

version 5.5 upgrade?

Alphete

Re: Installing SSL Certificate
« Reply #15 on: September 18, 2002, 04:30:45 AM »
I already have done that. Still the same issue.
Why the H*LL do I keep on getting the same f.... error.
I added the certificate into the trusted certificates for Eudora, and I get that the host name does not match the one on the certificate.

One thing I noticed is that when I view the certificate properties within Windows,
I see that the certificate was issued to alpha.net (the internal domain), not the
domain for the account (aymnet.com)
Could that be the issue?

Nathan Fowler

Re: Installing SSL Certificate
« Reply #16 on: September 18, 2002, 06:07:17 AM »
That IS the issue...

What is the name of the server you have configured Eudora to check?  Give me the full name and I will give you the command you need to execute.

Alphete

Re: Installing SSL Certificate
« Reply #17 on: September 18, 2002, 06:37:40 AM »
I have configured Eudora to check mail.aymnet.com or simply aymnet.com
Both point to the same IP address.
Nathan Fowler wrote:
>
> That IS the issue...
>
> What is the name of the server you have configured Eudora to
> check?  Give me the full name and I will give you the command
> you need to execute.

Nathan Fowler

Re: Installing SSL Certificate
« Reply #18 on: September 18, 2002, 07:36:35 AM »
The certificate much match the EXACT name as specified in the client.  If your client is configured to check "mail.aymnet.com" then your certificate much also match this hostname.  This is why you are getting errors.  Issue the following command:

openssl pkcs12 -export -in /usr/share/ssl/certs/securemail.pem -out mail.aymnet.com.p12 -name "mail.aymnet.com"

I believe this should work since you said you already have "securemail.pem"

Hope this helped,
Nathan

Alphete

Re: Installing SSL Certificate
« Reply #19 on: September 18, 2002, 08:09:37 AM »
Done that....
:(((
Don't know where could the problem be.
As a matter of fact, that was one of the earlier tries. Only I used the aymnet.com form (also in Eudora)
Never mind. I'll find a way to make it work.
Thanks a lot for all your efforts in helping me.
Regards.

Nathan Fowler wrote:
>
> The certificate much match the EXACT name as specified in the
> client.  If your client is configured to check
> "mail.aymnet.com" then your certificate much also match this
> hostname.  This is why you are getting errors.  Issue the
> following command:
>
> openssl pkcs12 -export -in
> /usr/share/ssl/certs/securemail.pem -out mail.aymnet.com.p12
> -name "mail.aymnet.com"
>
> I believe this should work since you said you already have
> "securemail.pem"
>
> Hope this helped,
> Nathan