maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   [Solved] E-mail certificate problem (https://talk.maemo.org/showthread.php?t=91992)

Malakai 2013-12-10 21:13

[Solved] E-mail certificate problem
 
Hello.

I have a certificate problem with my e-mail account (imaps and smtps) on n900.
The certificate seems valid and I can connect without any problem from thunderbird, but on the n900 it appears a message that tells me "certificate unkown".

To troubleshoot this issue I used these commands to see if the certificate is valid:

Code:

openssl s_client -connect domain.net:465 | openssl x509 -text
Code:

openssl s_client -connect domain.net:993 | openssl x509 -text
and all seems all right, except the fact that the certificate became valid yesterday.

I would like to know if the n900 doesn't know that certificate because it is too recent and what is the official way to get it in n900 (I mean not me having to manually accept it).

N900 with CSSU Stable Version 21.2011.38-1Smaemo6.1

PS: BTW how can I remove a self-signed certificate if I already accepted it, where do I have to look to remove it?

Thanks.

peterleinchen 2013-12-10 21:52

Re: E-mail certificate problem
 
Have a look here, afair some commands are speeled here ...

iceskateclog 2013-12-11 06:51

Re: E-mail certificate problem
 
This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7

Malakai 2013-12-11 08:00

Re: E-mail certificate problem
 
I've tried to update n900 but it is already up to date, and I deleted all the accounts I had in modest and tried to reconfigure them with no success (still have the message with unknown certificate)

I was wondering: How the new certificates get in maemo, I mean that the certificate I need is new (released in 9th of December) so maybe that maemo just don't know it, and it should update the certificates database.

Quote:

This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7
I've read the bug report but I don't seem to understand everything:

Quote:

After copying the files over so that:

$ md5sum /home/user/.modest/cache/*.db /etc/skel/.modest/cache/*.db|sort
a5ae49867124ac75f029a9a33af31bad /etc/skel/.modest/cache/cert8.db
a5ae49867124ac75f029a9a33af31bad /home/user/.modest/cache/cert8.db
dda6f3f2341531f22cc9f8b3ec251677 /etc/skel/.modest/cache/key3.db
dda6f3f2341531f22cc9f8b3ec251677 /home/user/.modest/cache/key3.db
f5ad0e29f7f56636638b84eb5fe5bb82 /etc/skel/.modest/cache/secmod.db
f5ad0e29f7f56636638b84eb5fe5bb82 /home/user/.modest/cache/secmod.db

and removing /home/user/.modest/cache/mail/.camel_certs/*, I can confirm that
both gmail and my personal accounts (server certificate signed by CAcert, root
certificate user-installed) work without certificate validation warnings.
What should I copy from where to where before removing /home/user/.modest/cache/mail/.camel_certs/*?

peterleinchen 2013-12-11 08:16

Re: E-mail certificate problem
 
Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO ;)). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute
Code:

~# cmcli -c common-ca -a downloaded.certificate.pem
cmcli --help tells you more ...

--
of course if it is a cert chain and the other certs are also newer you need to install them too.

Malakai 2013-12-12 13:47

Re: E-mail certificate problem
 
Quote:

Originally Posted by peterleinchen (Post 1394834)
Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO ;)). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute
Code:

~# cmcli -c common-ca -a downloaded.certificate.pem
cmcli --help tells you more ...

--
of course it is a cert chain and the other certs are also newer you need to install them too.

How do I download the certificate in PEM format? I don't have any experience with this as every time everything used to work out of the box.

peterleinchen 2013-12-12 21:36

Re: E-mail certificate problem
 
Look on your provider's web appearance, check internet and certificate authorities, use google.
Or just mail your provider and ask for the certificate(s).

Malakai 2013-12-14 16:46

Re: E-mail certificate problem
 
Solved. I accepted the certificate and now the connection is made without warning. Still I don't understand why that certificate wasn't in the n900 as it was valid.

pichlo 2013-12-14 18:57

Re: [Solved] E-mail certificate problem
 
My host's certificate also wasn't included by default but Modest asked me the first time I connected to my IMAP account. I am surprised yours didn't.


All times are GMT. The time now is 04:11.

vBulletin® Version 3.8.8