From owner-freebsd-security  Fri Nov 10  0:55:30 2000
Delivered-To: freebsd-security@freebsd.org
Received: from web2904.mail.yahoo.com (web2904.mail.yahoo.com [128.11.68.47])
	by hub.freebsd.org (Postfix) with SMTP id 57DED37B4CF
	for <freebsd-security@FreeBSD.ORG>; Fri, 10 Nov 2000 00:55:27 -0800 (PST)
Received: (qmail 19658 invoked by uid 60001); 10 Nov 2000 08:55:26 -0000
Message-ID: <20001110085526.19657.qmail@web2904.mail.yahoo.com>
Received: from [195.167.118.206] by web2904.mail.yahoo.com; Fri, 10 Nov 2000 00:55:26 PST
Date: Fri, 10 Nov 2000 00:55:26 -0800 (PST)
From: "Angelo a.k.a shagy" <shagy@rocketmail.com>
Subject: stunnel, outlook express and qpopper
To: freebsd-security@FreeBSD.ORG
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Greetings i'm  trying to wrap pop3 with stunnell (ssl)
I'm using FreeBSD 3.4
stunnel 3.4a (from the ports)
qpopper 3.1

I start qpopper with the following options
"qpopper 192.168.5.1:110 -S"

Then stunnel starts up like so
"stunnel -d pop3s -r 192.168.5.1:pop3"

When trying to access mail through outlook express I
get the following message.
"The server you are connected to is using a security
certificate that does not match its internet address.
Do you want to continue using this server?"

I've read that IE and Netscape have a hard coded list
of Certificate Authorities. And you can get this
message if you haven't had your server certificate
signed by a CA such as verisign.  Is this an absolute
truth *or* is there a way around this?  Or am I just
way off?!

Any help would be appreciated

Thanks in advance,
Ang

__________________________________________________
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one Place.
http://shopping.yahoo.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message