I want to start working with a server that uses a secure connection. I have this perl script i'm working on that requires the user to enter his login name and password. Basically i want to use ssl so his name/pw is encrypted while being sent to my server for validation. However, I do not want to pay for a SSL certificate from one of the major companies like Thawte, VeriSign, or GeoTrust. I heard that there was a way where you can just use OpenSSL or something? I'm on a windows machine and the IIS program allows you to provide a SSL certificate? Is the process of making your own SSL certificate easy? Even if its not validated and gives the annoying prompt, it doesn't matter since all i'm using this ssl connection for is to secure the data being transferred (rather then having credibility with the client).