[Solved] E-mail certificate problem - maemo.org

Active Topics

U-Boot for Nokia RX-51 with BootMenu (updated version 2012.10-rc3-1) (841)
to Alternatives by omniteal@pm.me - 5 hrs ago
List of well performing apps on Leste (34)
to Maemo 7 / Leste by biketool - 15 hrs, 57 mins ago
Maemo repository (5)
to Community by dredlok706 - 2 days, 11 hrs ago
Re-commissioning N9 in 2018 (127)
to MeeGo / Harmattan by smatkovi - 2 days, 13 hrs ago
Porting apps to Leste (41)
to Maemo 7 / Leste by Arno_11 - 3 days, 7 hrs ago
N900 is not recognizable on any of my devices (windows 10,7, xp) What can I do? (1)
to Nokia N900 by nieldk - 4 days, 19 hrs ago
more...

Thread Tools

Malakai	2013-12-10 , 21:13
Posts: 175 \| Thanked: 210 times \| Joined on Mar 2013	#1

Hello.

I have a certificate problem with my e-mail account (imaps and smtps) on n900.
The certificate seems valid and I can connect without any problem from thunderbird, but on the n900 it appears a message that tells me "certificate unkown".

To troubleshoot this issue I used these commands to see if the certificate is valid:

Code:

openssl s_client -connect domain.net:465 | openssl x509 -text

Code:

openssl s_client -connect domain.net:993 | openssl x509 -text

and all seems all right, except the fact that the certificate became valid yesterday.

I would like to know if the n900 doesn't know that certificate because it is too recent and what is the official way to get it in n900 (I mean not me having to manually accept it).

N900 with CSSU Stable Version 21.2011.38-1Smaemo6.1

PS: BTW how can I remove a self-signed certificate if I already accepted it, where do I have to look to remove it?

Thanks.

Last edited by Malakai; 2013-12-14 at 16:47.

Quote & Reply |

	peterleinchen	2013-12-10 , 21:52
	Posts: 4,118 \| Thanked: 8,901 times \| Joined on Aug 2010 @ Ruhrgebiet, Germany	#2

Have a look here, afair some commands are speeled here ...

__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature

Quote & Reply |

iceskateclog	2013-12-11 , 06:51
Posts: 58 \| Thanked: 134 times \| Joined on Dec 2012 @ Vilnius, Lithuania	#3

This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7

Quote & Reply |

Malakai	2013-12-11 , 08:00
Posts: 175 \| Thanked: 210 times \| Joined on Mar 2013	#4

I've tried to update n900 but it is already up to date, and I deleted all the accounts I had in modest and tried to reconfigure them with no success (still have the message with unknown certificate)

I was wondering: How the new certificates get in maemo, I mean that the certificate I need is new (released in 9th of December) so maybe that maemo just don't know it, and it should update the certificates database.

This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7

I've read the bug report but I don't seem to understand everything:

After copying the files over so that:

$ md5sum /home/user/.modest/cache/*.db /etc/skel/.modest/cache/*.db|sort
a5ae49867124ac75f029a9a33af31bad /etc/skel/.modest/cache/cert8.db
a5ae49867124ac75f029a9a33af31bad /home/user/.modest/cache/cert8.db
dda6f3f2341531f22cc9f8b3ec251677 /etc/skel/.modest/cache/key3.db
dda6f3f2341531f22cc9f8b3ec251677 /home/user/.modest/cache/key3.db
f5ad0e29f7f56636638b84eb5fe5bb82 /etc/skel/.modest/cache/secmod.db
f5ad0e29f7f56636638b84eb5fe5bb82 /home/user/.modest/cache/secmod.db

and removing /home/user/.modest/cache/mail/.camel_certs/*, I can confirm that
both gmail and my personal accounts (server certificate signed by CAcert, root
certificate user-installed) work without certificate validation warnings.

What should I copy from where to where before removing /home/user/.modest/cache/mail/.camel_certs/*?

Quote & Reply |

	peterleinchen	2013-12-11 , 08:16
	Posts: 4,118 \| Thanked: 8,901 times \| Joined on Aug 2010 @ Ruhrgebiet, Germany	#5

Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO

). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute

Code:

~# cmcli -c common-ca -a downloaded.certificate.pem

cmcli --help tells you more ...

--
of course if it is a cert chain and the other certs are also newer you need to install them too.

Last edited by peterleinchen; 2013-12-12 at 21:36.

Quote & Reply |

Malakai	2013-12-12 , 13:47
Posts: 175 \| Thanked: 210 times \| Joined on Mar 2013	#6

Originally Posted by peterleinchen

Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO ). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute
Code:
~# cmcli -c common-ca -a downloaded.certificate.pem
cmcli --help tells you more ...

--
of course it is a cert chain and the other certs are also newer you need to install them too.

How do I download the certificate in PEM format? I don't have any experience with this as every time everything used to work out of the box.

Quote & Reply |

	peterleinchen	2013-12-12 , 21:36
	Posts: 4,118 \| Thanked: 8,901 times \| Joined on Aug 2010 @ Ruhrgebiet, Germany	#7

Look on your provider's web appearance, check internet and certificate authorities, use google.
Or just mail your provider and ask for the certificate(s).

Quote & Reply |

Malakai	2013-12-14 , 16:46
Posts: 175 \| Thanked: 210 times \| Joined on Mar 2013	#8

Solved. I accepted the certificate and now the connection is made without warning. Still I don't understand why that certificate wasn't in the n900 as it was valid.