Well, I haven't done this, so naturally I should comment on it. :) Thawte (www.thawte.com), which is really VeriSign, has some informaton on using OpenSSL and submiting the CSR to them. All the information is under the Apache section.
I'm assuming the procedure is the same as for web sever certs. The thing the client is concerned with is the cn which should be the FQDN of the mail host. I assume this because when I access my mail servers using the IP address instead of the FQDN, I get the warning popup. If what I am saying is wrong, please let me know. -andy Hubbard, David wrote: > Can someone tell me how to generate an SSL > certificate for use by courier-imap that > can be signed by one of the normal CA's? > Right now I generate my own, signed by my > openssl, but all my user's software > complains about the certificate being > signed by an unrecognized authority. > > With openssl, I do the following to generate > a cert for courier-imap: > > openssl req -new -x509 -nodes -out cert.pem -keyout cert.pem > > How do I make a key and CSR to be signed > by an external authority? I've done it for > web certs but I believe these are of a > different format. > > Sorry for the off-topic post, > > Dave > > _______________________________________________ > courier-users mailing list > [EMAIL PROTECTED] > Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users > > _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
