Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Ruusvuu on April 25, 2003, 01:21:08 AM

Title: FreeSSL
Post by: Ruusvuu on April 25, 2003, 01:21:08 AM

Just came to my attention:

http://freessl.com

Title: Re: FreeSSL
Post by: Guck Puppy on April 26, 2003, 02:44:01 AM

Thanks for this tip Ruusvuu! 30 mins, following the howto at :

http://www.v-cut.com/SME/HowTo/SSL-Certificates-on-SME.htm

and I had the certificate in place - for $0!

Only thing to be wary of, if you choose the "secure" way of password protecting your private key, it appears apache will prompt for that password whenever it's (re)started.

I guess this could be an issue if I ever wanted an automated, unattended reboot of the system for some reason...

Cheers,

G

Title: Re: FreeSSL
Post by: Ruusvuu on April 28, 2003, 10:06:26 PM

Relative to these certs, I have installed one for a virtual domain.

Galeon did not have a problem with this, but IE warned about about the primary cert and once rejected, accepted the right cert.

Anyone know of a way to make IE recognize the right cert right off the bat?

Title: Re: FreeSSL
Post by: Bill Talcott on April 28, 2003, 11:09:26 PM

Ruusvuu wrote:
>
> Relative to these certs, I have installed one for a virtual
> domain.
>
> Galeon did not have a problem with this, but IE warned about
> about the primary cert and once rejected, accepted the right
> cert.
>
> Anyone know of a way to make IE recognize the right cert
> right off the bat?

This has been covered before. The initial SSL connection is made before the server determines that it's for a virtual domain.

Title: Re: FreeSSL
Post by: Morten U. Hansen on December 01, 2003, 06:29:03 PM

Hi Guck Puppy

Thanks for above info. I have followed the How-to and installed the certificate. I do however still get the annoying warnings when I check mail in Outlook-Express. What can I do to remove these warnings (one per mail account on the SME server).?

Thanks Morten

Title: Re: FreeSSL
Post by: Guck Puppy on December 01, 2003, 09:38:36 PM

Morten U. Hansen wrote:

> installed the certificate. I do however still get the
> annoying warnings when I check mail in Outlook-Express. What
> can I do to remove these warnings (one per mail account on
> the SME server).?

Apples and Oranges here... retrieving mail from your SME server and adding a certificate to your SME's webserver are two separate issues.

So I guess you have setup secure email retrieval for your server?

The key is that the 'common name' on the certificate you got must be the same as the server name OE is using to access your secure mail port (for example, www.yourdomain.com, unless the certificate specifically says "mail.yourdomain.com").

So long as you have added the certificate to the securemail process there should be no warnings...

The only other suggestion I can make is to make sure you have the 'root certificates' update for windows which is available from windowsupdate.

G