Results 1 to 3 of 3

Thread: Certificates for newbies?

  1. #1
    Stergil is offline Senior Member
    Join Date
    May 2007
    Posts
    71
    Rep Power
    8

    Question Certificates for newbies?

    I have a very basic understanding of how and why certificates are used. I have Zimbra installed at home for me, myself, and I. I've recently changed to using https access since lately I've been accessing my mail server externally more and more.

    When attempting to access my mail server from a friend's or client's machine I get a certificate error citing that the user is unknown or that it's not a trusted signer.

    Is this to be expected unless I somehow purchase a commercial certificate from somewhere? Or is this a case of me simply not knowing what I'm doing? I wouldn't be terribly surprised if it was the latter of the two

    Any direction is appreciated. I've done some searching and most of what I found was dealing with expired or commercial certs.

  2. #2
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    It's not you different browsers give different warning levels for self-signed certs (one's not signed by a recognized certificate authority). You can install it as a trusted certificate on your machine, but yes when working from a friends you'll still get the prompt. Let's say you're using Windows, IE7 for instance got a lot more harsh in their warnings...especially if it's not commercial & the server/common name doesn't match the url entered in your browser. Firefox & Safari are a tad nicer in their warnings

    IE7:
    HTTPS Security Improvements in Internet Explorer 7
    IEBlog : Better Website Identification and Extended Validation Certificates in IE7 and Other Browsers
    More on the Extended Validation Certificates aka: 'green-bar' initiative: Extended Validation Certificate - Wikipedia, the free encyclopedia

  3. #3
    Stergil is offline Senior Member
    Join Date
    May 2007
    Posts
    71
    Rep Power
    8

    Default

    I have a matching common name to domain, but it's self signed and I'm a nobody, so I always get the warning/error I guess.

    I always use Firefox, and when seeing it in IE at a client's site it seemed a bit more harsh, like you suggested.

    Thanks much for your input, and for the urls!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Installing existing SSL certificates (solved)
    By inigoml in forum Administrators
    Replies: 22
    Last Post: 02-24-2009, 10:32 AM
  2. [SOLVED] Using existing certificates
    By m.a.g. in forum Administrators
    Replies: 6
    Last Post: 02-06-2008, 11:20 PM
  3. Replies: 13
    Last Post: 01-15-2008, 08:35 PM
  4. Replies: 1
    Last Post: 11-05-2007, 06:55 PM
  5. Commercial Certificates for slapd
    By trunet in forum Administrators
    Replies: 2
    Last Post: 10-09-2007, 05:24 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •