On Saturday, September 05, 2015 1:05:06 AM lee wrote: > In this case, I happen to have full physical access to the server and > thus to the certificate stored on it. This is not the case for, let's > say, an employee checking his work-email from home whom I might give the > login-data on the phone and instruct to add an exception when the dialog > to do so pops up when they are trying to connect.
As a workaround you can create your own CA cert. I tested with a windows self- signed cert (I guess the correct term is self-issued) and the openssl command will show two certs. The second is the CA. http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/ -- Fernando Rodriguez

