Chris Cameron wrote:

> I've got IMAP working with a self-signed X.509 cert which is great, but
> I'm looking to have mail clients stop complaining about the self signed
> certificate.

> So how do I go about getting one? I've got vague ideas from VPNs way
> back when, but I'm not having much luck finding anything right now.

There are two ways.

One, you make your own CA certificate and have your users download it
and add it to their root certificates. You will find good instructions
for this at http://www.modssl.org/docs/2.8/ssl_faq.html#ToC29 . To
facilitate the download you should AddType application/x-x509-ca-cert
in your httpd.conf .

Two, you create a certificate request (see
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC28 ), send it together
with a pile of paperwork to Thawte or any other root-CA whose certificate
is already in the clients, pay a bucketful of money, and put what they
send back to you in the place of your your current pems .

Z





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to