On Mon, 3 Jul 2000, Gary Miller wrote:
[...]
In Outlook When I access my Mail Server(courier) it tells me that this
server is using a certificate that does not match it's internet
address.
You probably gave the wrong name to the DN (Distinctive Name) field when
generating the certificate (assuming you actually generated your own
certificate). It should match the name by which you intend to call the
server in the IMAP client configuration.
I am using a Self Signed certificate but I don't think I should be
getting this error
if anyone has a procedure for generating a valid self signed
certificate please share it with us
There is no way to actually generate a valid self signed certificate,
unless you also put yourself as one of the certification authorities
recognized by your IMAP ssl client.
You can generate a self-signed certificate whose only error will be that
your IMAP client doesn't recognize the certification authority. To do
that, follow the instructions to generate a self-signed certificate (under
the instructions on how to buy an SSL certificate) at
http://www.thawte.com/
observing the following:
- Chose your browser as Apache+mod_ssl.
- in the step were it tells you to actually generate the certificate,
chose a longer period than "-days 30" (such as "-days 365") on openssl
command line switches.
Of course you can always go ahead and actually buy a certificate from
them so that your IMAP client recognizes your server as fully
certificated.
Regards, Leo