Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Nov 2000 01:06:35 -0800
From:      "Crist J . Clark" <cjclark@reflexnet.net>
To:        "Angelo a.k.a shagy" <shagy@rocketmail.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: stunnel, outlook express and qpopper
Message-ID:  <20001110010635.Z75251@149.211.6.64.reflexcom.com>
In-Reply-To: <20001110085526.19657.qmail@web2904.mail.yahoo.com>; from shagy@rocketmail.com on Fri, Nov 10, 2000 at 12:55:26AM -0800
References:  <20001110085526.19657.qmail@web2904.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Nov 10, 2000 at 12:55:26AM -0800, Angelo a.k.a shagy wrote:
> Greetings i'm  trying to wrap pop3 with stunnell (ssl)
> I'm using FreeBSD 3.4
> stunnel 3.4a (from the ports)
> qpopper 3.1
> 
> I start qpopper with the following options
> "qpopper 192.168.5.1:110 -S"
> 
> Then stunnel starts up like so
> "stunnel -d pop3s -r 192.168.5.1:pop3"
> 
> When trying to access mail through outlook express I
> get the following message.
> "The server you are connected to is using a security
> certificate that does not match its internet address.
> Do you want to continue using this server?"
> 
> I've read that IE and Netscape have a hard coded list
> of Certificate Authorities. And you can get this
> message if you haven't had your server certificate
> signed by a CA such as verisign.  Is this an absolute
> truth *or* is there a way around this?  Or am I just
> way off?!
> 
> Any help would be appreciated

A self-signed certificate worked fine for me back when I used to run a
similar setup (UW-IMAP and POP3, stunnel, and MS OE). How did you make
your cert?
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001110010635.Z75251>