Generating SSL Certificates for Email Clients to get rid of the Self Sign Error on FC3
ignored_mailbox at yahoo.com.au
Mon Sep 25 05:40:48 UTC 2006
On Mon, 2006-09-25 at 08:32 +0530, ankush grover wrote:
> I am running Postfix 2.1.5 on FC3 with TLS and Dovecot with IMAPsS &
> POP3s on FC3. Certificates are self sign and everytime any of the
> Email client like Outlook Express/Microsoft Outllook, Incredimail,
> Thunderbird(MS & Linux) etc connects to the Mail Sevrer they receive
> warning message "that the certificate is not from the trust source".
This would be because they're not counter-signed by some authoritative
source that they trust. Anybody could create their own certificates, so
you can't "trust" self-signed certificates, directly.
You'd need to have a trusted third party counter-sign them, one that
your clients already know about (verisign, etc.), or manually trust such
certificates on the clients that are using them (I've no hints on how to
do that). The first option costs money, and the latter requires that
users know what they're doing (including, having the sense to check that
they're trusting YOUR certificate, and not a forgery).
(Currently running FC4, occasionally trying FC5.)
Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.
More information about the users