Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: CKConsulting on April 19, 2006, 05:18:14 AM

Title: pop3s outlook certificate
Post by: CKConsulting on April 19, 2006, 05:18:14 AM
Hello, I know this is not exactly an SME question but.......
I'm moving from SME6.01 to SME7rc1.  I have several remote office's some connected via VPN, some not, some home users.  On SME6.01 I have external pop email enabled.  I know some security risk but I'm willing to take them at this point.  SME7 only allows pop3s, which I like but on Outlook/Thunderbird prompts with "certificate warning" every time.  Is there a way to make it a permanently trusted site.
Clients are win2000 and XP pro, Outlook 2000, 2003, Thunderbird.

Thanks
Rick
Title: Re: pop3s outlook certificate
Post by: cactus on April 19, 2006, 04:00:14 PM
Quote from: "CKConsulting"
Hello, I know this is not exactly an SME question but.......
I'm moving from SME6.01 to SME7rc1.  I have several remote office's some connected via VPN, some not, some home users.  On SME6.01 I have external pop email enabled.  I know some security risk but I'm willing to take them at this point.  SME7 only allows pop3s, which I like but on Outlook/Thunderbird prompts with "certificate warning" every time.  Is there a way to make it a permanently trusted site.
Clients are win2000 and XP pro, Outlook 2000, 2003, Thunderbird.

Thanks
Rick

You receive this error because it is a self signed certificate. It is not signed by a trusted certificate authority. If you want to remove this problem you will have to get it signed by a trusted certificate authority for instance VeriSign (http://www.verisign.com/), but it is not for free unfortunately.

See the wiki: Creating SSL Certificates (http://no.longer.valid/phpwiki/index.php/Creating%20SSL%20Certificates) for details on how to generate a certificate, at the bottom is the part about senidng it to a trusted certificate authority (CA) so they can sign it for you.
Title: pop3s outlook certificate
Post by: CKConsulting on April 19, 2006, 04:36:44 PM
WOW, it very pricey $1790. Even though I'd like to use the pop3s, I'm not sure I can spend the $$, I may just enable pop email.

Thanks for the info, I'll research a little and see what I can do with the price.

Rick
Title: pop3s outlook certificate
Post by: cactus on April 19, 2006, 05:05:28 PM
Quote from: "CKConsulting"

Thanks for the info, I'll research a little and see what I can do with the price.

Rick

Do so a quick look on the net already gave me one option with 128bits single root certificate and 99% browser coverage for less than 15 British Pounds.
Title: pop3s outlook certificate
Post by: duncan on April 20, 2006, 12:58:05 AM
Browse to https://serverip:995 and install the certificate. Will work for outlook clients - not sure about others.
Title: pop3s outlook certificate
Post by: dhardy on April 22, 2006, 12:47:15 PM
Other certificate options ....

www.ev1servers.net do an ssl cert for $15 / £9.


http://www.ev1servers.net/Dedicated/SSL/RapidSSL.aspx


CA Cert offer FREE certificates, but you need to install their root certificate.

http://www.cacert.org

You will find it easiest with a paid for certificate, the CA Cert route lets you get as many ssl certs as you want for each domain you have logged with their system.

I've gone the cacert way, but I have a lot fewer users than you do :-)

HTH

David.