Date: Fri, 30 Jul 2004 15:22:49 -0400 From: Chuck Swiger <cswiger@mac.com> To: Tom Limoncelli <tal@whatexit.org> Cc: freebsd-questions@freebsd.org Subject: Re: Setting up good certs for ports/mail/imap-uw? Message-ID: <410AA009.7000702@mac.com> In-Reply-To: <9C51062C-E0E9-11D8-B4EB-000D93C2342A@whatexit.org> References: <9C51062C-E0E9-11D8-B4EB-000D93C2342A@whatexit.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Tom Limoncelli wrote: > The instructions for ports/mail/imap-uw tell you that "make cert" > generates certs that are self-signed and warns you that it is better to > get "real" certs but doesn't explain how to do that. Any suggestions? "real" certs are ones signed by a well-known registrar like Verisign, EnTrust, Thawte, etc. To get one, you generate a CSR (certificate signing request) as done in "make cert", only you send that CSR to the registrar and pay them to sign it, very much like one does when getting a "real" SSL cert to do HTTPS. There is nothing magic about the well-known registrars, except that their CA certificates already ship as pre-trusted with the email clients and web browsers that most people use. -- -Chuck
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?410AA009.7000702>