Comment Mail.app - IMAP over SSL - Home Brewed Certificate (Score 1) 843
Hello,
There is a new feature that needs to be addressed for those connecting via an SSL-encrypted connection to an IMAP server that uses a home brewed certificate using Mail.app.
Mail.app in previous releases did not complain about mail servers with SSL certificates from unknown CA's, but does in Panther.
I have tried adding the certificate for the CA into the X509Anchors keychains -- this process works for allowing Safari trust SSL certificates issued by that CA. However, Mail.app does not seem to use the same keychain.
I noticed that in Panther that there is another keychain in /System/Library/Keychains: X509Certificates, and I tried adding the CA's certificate to that keychain also, but Mail.app still complained.
I also tried specifying for this CA cert that it should always be trusted (as opposed to using the system defaults), and Mail.app still complained.
By the way, when Mail.app complains, it asks you whether you want to cancel or continue. Continuing apparently does not have it connect and pick up messages.
Any direction anyone can provide would be most appreciated.
Thanks!!
There is a new feature that needs to be addressed for those connecting via an SSL-encrypted connection to an IMAP server that uses a home brewed certificate using Mail.app.
Mail.app in previous releases did not complain about mail servers with SSL certificates from unknown CA's, but does in Panther.
I have tried adding the certificate for the CA into the X509Anchors keychains -- this process works for allowing Safari trust SSL certificates issued by that CA. However, Mail.app does not seem to use the same keychain.
I noticed that in Panther that there is another keychain in
I also tried specifying for this CA cert that it should always be trusted (as opposed to using the system defaults), and Mail.app still complained.
By the way, when Mail.app complains, it asks you whether you want to cancel or continue. Continuing apparently does not have it connect and pick up messages.
Any direction anyone can provide would be most appreciated.
Thanks!!