My certificate have CN=mx.mysite.ro and I tried with it :
    https://mx.mysite.ro ---- no warning
    imaps://mx.mysite.ro --- WARNING
    pop3s://mx.mysite.ro --- WARNING
In DNS, mx.mysite.ro is A record (no CNAME). It is the same certificate 
on all protocols (I've looked at serial number).

Manuel Guerrero Martos wrote:

>Hi, Alin.
>
>-----Mensaje original-----
>De: Alin Nastac [mailto:[EMAIL PROTECTED]] 
>Enviado el: martes, 17 de septiembre de 2002 12:49
>Para: openssl users
>Asunto: POP3/IMAP over SSL problem
>
>
> Hi,
>
>I receive a strange error on a WinXP with IE6 when I use a POP3 over SSL
>
>account. It says:
>   The server you are connected to is using a security certificate that 
>could not be verified.
>   The certificate's CN name does not match the passed value.
>
>My certificate's CN is the same with what I set it as POP3 server. I've 
>imported in browser the chains of certificates. And strangely enough 
>when I use the same certificate on apache and use https it works without
>
>any warning!!!
>
>  
>
>>https://mx.mysite.ro   ? 
>>    
>>
>
>I have a similar problem on the latest Mozilla (1.0.1) but there not 
>even https works without this dumb warning :
>   Security Error: Domain Name Mismatch
>   You have attempted to establish a connection with "mx.mysite.ro". 
>However, the security certificate presented belongs to "mx.mysite.ro". 
>It is possible, though unlikely, that someone may be trying to intercept
>
>your communication with this web site.
>
>  
>
>>?
>>    
>>
>
>Talking about stunning errors, huh?
>
>  
>
>>Have you issued any cert with CN=www.mysite.ro for https or with 
>>CN=mx.mysite.ro ?
>>DNS for mx.mysite.ro is a CNAME of www.mysite.ro or viceversa ?
>>    
>>


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to