From owner-freebsd-questions  Wed Sep 19 11:14: 5 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13])
	by hub.freebsd.org (Postfix) with ESMTP id 7B7FB37B509
	for <freebsd-questions@FreeBSD.ORG>; Wed, 19 Sep 2001 11:14:01 -0700 (PDT)
Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55])
	by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id OAA00503;
	Wed, 19 Sep 2001 14:19:47 -0400 (EDT)
	(envelope-from shovey@buffnet.net)
Date: Wed, 19 Sep 2001 14:13:56 -0400 (EDT)
From: Stephen Hovey <shovey@buffnet.net>
To: Todd Reed <ex279@hotmail.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Signing SSL Certificates
In-Reply-To: <F47t8fddAkOhw2RlC6a000008fd@hotmail.com>
Message-ID: <Pine.BSF.4.05.10109191413090.7830-100000@buffnet11.buffnet.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


the browsers come with preconfig'd acceptable cert authorities - which
isnt you - so while it will make the SSL connection, the end user will get
that pop up.

On Wed, 19 Sep 2001, Todd Reed wrote:

> Does anyone using SSL sign their own certificates without using Verisign or 
> another company?  I've got my HTTPS server up and running fine, but it will 
> give a message when entering the site from a browser:
> 
> Yellow !:  The security certificate was issued by a company you have not 
> chosen to trust.  View the ertificate to determine whether you want to trust 
> the certifying authority
> 
> Green Check:  The Security certificate date is valid
> 
> Yellow !:  The name on te security certificate is invalid or does not match 
> the name of the site.
> 
> I've read where I need to setup a signing CA.  I've read through the MODSSL 
> documentation, but I still can't get it.  Are there other recomendations or 
> anyone know of any other info that may help?
> 
> --Todd
> 
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message