admin answers:

The standard is pretty much OpenSSL, which was created by the OpenBSD (not FreeBSD) team. Those guys are incredible security zealots. OpenBSD has only had two security flaws in over ten years–I double-dog dare you to name another networked operating system with that kind of track record. A funny story: Linus Torvalds (who I think is an a-hole for several reasons–despite his OS being awesome) once criticized the OpenBSD team. He said: “I think the OpenBSD crowd is a bunch of masturbating monkeys, in that they make such a big deal about concentrating on security to the point where they pretty much admit that nothing else matters to them.”

http://www.openssl.org/

Anyway, I hope you know that any SSL certificate that you generate yourself will always throw up a warning. If you don’t want people to see a warning message that the certificate may be false, then you need to purchase a certificate from a universally trusted third party, such as VeriSign or GoDaddy.