<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content=text/html;charset=ISO-8859-1>
<META content="MSHTML 6.00.2900.3243" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I don't know that it's evil per se to use a
self-signed certificate and the costs for certificates is quite
high.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>However, I will say that the new service that enom
offers for ~$20 seems very good for an annual certificate. It's so cheap I
can't justify doing it otherwise.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Regards,<BR>KAM</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=alaricd@pengdows.com href="mailto:alaricd@pengdows.com">Alaric
Dailey</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=fg2000fr@yahoo.fr
href="mailto:fg2000fr@yahoo.fr">fg</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Cc:</B> <A title=stunnel-users@mirt.net
href="mailto:stunnel-users@mirt.net">stunnel-users@mirt.net</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, December 28, 2007 2:25
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [stunnel-users] Avoiding
outlook express warning...</DIV>
<DIV><BR></DIV><BR>1. Use a cert from a CA that is included in the MS
Certificate Store<BR>2. Add your cert to the store<BR><BR><BR>Using
self-signed certs is evil, get one from a CA, if you don't want to pay, you
can use StartCom ( <A class=moz-txt-link-abbreviated
href="http://www.startssl.com">www.startssl.com</A> ) which is included with
every browser EXCEPT IE, and add it to your machines certificate store to
avoid the warning with OE or other MS products. However, if you use
Thunderbird the StartCom root cert is already included.<BR><BR>fg wrote:
<BLOCKQUOTE cite=mid:724573.61452.qm@web25102.mail.ukl.yahoo.com
type="cite">Hello all<BR>I use stunnel on a server with a stunnel.pem file
generated with openSSL,( this file is not certified with verisign or
others...)<BR>Each time i launch outlook express on a client a have a
warning saying that the server is using a certificate who can't be
verified....<BR>I have to close this warning and after all is
ok...<BR><BR>Question <BR>Is it possible to skip this warning? perhaps with
a public key approuved in outlook express???<BR><BR>thanks for help<BR>
<P></P>
<HR SIZE=1>
Ne gardez plus qu'une seule adresse mail ! <A
href="http://fr.rd.yahoo.com/mail/mail_taglines/trueswitch/*http://www.trueswitch.com/yahoo-fr/"
moz-do-not-send="true">Copiez vos mails</A> vers Yahoo! Mail <PRE wrap=""><HR width="90%" SIZE=4>
_______________________________________________
stunnel-users mailing list
<A class=moz-txt-link-abbreviated href="mailto:stunnel-users@mirt.net">stunnel-users@mirt.net</A>
<A class=moz-txt-link-freetext href="http://stunnel.mirt.net/mailman/listinfo/stunnel-users">http://stunnel.mirt.net/mailman/listinfo/stunnel-users</A>
</PRE></BLOCKQUOTE><BR>
<DIV class=moz-signature>
<DIV style="FONT-SIZE: small"><A href="http://cert.startcom.org/?app=109"></A><!-- --></DIV></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>stunnel-users
mailing
list<BR>stunnel-users@mirt.net<BR>http://stunnel.mirt.net/mailman/listinfo/stunnel-users<BR></BLOCKQUOTE></BODY></HTML>