Hi,
I receive a strange error on a WinXP with IE6 when I use a POP3 over SSL account. It says: The server you are connected to is using a security certificate that could not be verified. The certificate's CN name does not match the passed value. My certificate's CN is the same with what I set it as POP3 server. I've imported in browser the chains of certificates. And strangely enough when I use the same certificate on apache and use https it works without any warning!!! I have a similar problem on the latest Mozilla (1.0.1) but there not even https works without this dumb warning : Security Error: Domain Name Mismatch You have attempted to establish a connection with "mx.mysite.ro". However, the security certificate presented belongs to "mx.mysite.ro". It is possible, though unlikely, that someone may be trying to intercept your communication with this web site. Talking about stunning errors, huh? Anyway, is there a change in the way of which the client authenticate a server besides trusted CA and CN == hostname? Perhaps CN = hostname:portnumber? Have a nice day, Alin ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
