free SSL CAs?

Are there any free Certificate Authorities for SSL?
I've got a Stronghold server running, and I don't particularly want to pay
Verisign/Thawte's high prices, but I do want to be able to do real SSL.
I've set up my own CA, and given myself my own cert., but having the same
server you're interacting with being the one that's the CA for the
transaction leaves the setup open to man-in-the-middle attacks (I'd think,
at least...).

So, who do I turn to for a cert.?  I don't need amazingly trusted or
trustworthy security -- maybe just some third party whose site is unlikely
to have been compromised, etc...

Please respond by email: I've moved to coderpunks, and so won't see
replies on cypherpunks.

thanks,
-sq

Sam Quigley wrote:
> 
> I've set up my own CA, and given myself my own cert., but having the same
> server you're interacting with being the one that's the CA for the
> transaction leaves the setup open to man-in-the-middle attacks (I'd think,
> at least...).

It's up to the user (at least with the Netscape Navigator) to decide
what CA certificates or particular server certificates to trust.
Self-signed certificates are logically at the root of any certificate
chain.

PK
--
Philip L. Karlton			karlton@netscape.com
Principal Curmudgeon			http://www.netscape.com/people/karlton
Netscape Communications Corporation

    Everything should be made as simple as possible, but not simpler.
	-- Albert Einstein

I don't think that their CA software is free, but they do have a free demo 
version. http://www.xcert.com


-- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred.
   Defeat the Demopublican Unity Party. Vote no on Clinton/Dole in November.
   Vote Harry Browne for President.


On Sun, 3 Nov 1996, Sam Quigley wrote:

> 
> Are there any free Certificate Authorities for SSL?
[...]

Lucky Green wrote:

| I don't think that their CA software is free, but they do have a free demo 
| version. http://www.xcert.com

SSLeay provides CA tools.

Adam


-- 
"Every year the Republicans campaign like Libertarians, and then go to
Washington and spend like Democrats."

Vote Harry Browne for President.  http://www.harrybrowne96.org