Ssl – Self-signed Cert for yum repository server

You can create a wildcard certificate with the IIS Resource Toolkit (called selfssl.exe) if you need it to last longer than (I think) the 30 days that the built-in certificate generator in IIS Manager gives you (don't recall off the top of my head where that is; believe it's under "Certificates" in the right-side panel). If not, just use the built-in one.

This self-signed wildcard certificate (*.example.com), once created and in the certificate store, can be assigned to all your sites under IIS under the Bindings that are configured with a corresponding host header.

Recently, I have encountered a similar problem. I solved it by adding SslForceVersion option.

My config is like:

Acquire::https::test.com {
    Verify-Peer "true";
    Verify-Host "true";

    CaInfo "/tmp/ca.crt";

    SslCert "/tmp/client.crt";
    SslKey  "/tmp/client.key";
    SslForceVersion "SSLv3";
};