greetings. the bundled ssl tools for OpenBSD are slick, and much appreciated. i tried setting them up on a new machine recently though running -CURRENT (cvs up'ed yesterday) and found that the certs aren't recognized by IE/Outlook. netscape can https://hostname just fine, and netscape mail can ssl imap connections just fine too. but outlook express and IE can't view the webpage via https, and outlook express can't see imap mail via ssl. it says something to the effect of: "The identity of the certificate issuer is unknown." I'm assuming this is because I used a self-signing key. Is there a work-around for this that people know of? I've dug through my openssl mailing list archives and found some people talking abou ca-fix for old openssl and ssleay, but that it wasn't needed anymore. I can't seem to find out where IE can be told to shut up about CA's, if thats the fix. Any tips?
Attachment:
pgpFrjt1uOiPY.pgp
Description: PGP signature