[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [EVOLUTION] Issue with mistakenly rejected SSL certificate



On Fri, 2012-11-30 at 13:49 +0000, Darac Marjal wrote:
> On Fri, Nov 30, 2012 at 02:40:34PM +0100, Abou Al Montacir wrote:
> > Hi all;
> > 
> > Yesterday, evolution complained about my ISP SSL certificate was not
> > valid and asked me to accept it or to reject it. I've mistakenly
> > rejected SSL certificate, but since could not connect anymore to the
> > server. It keeps giving me error messages: "Could not connect to
> > imap.sfr.fr: Input/output error"
> > 
> > I've tried with [1] and also with [2] and can see that it connects using
> > telnet -z ssl howver openssl shows that the certificate date has
> > expired. I do not know how to cope with this as I can not find any
> > option to recover my mistake.
> > 
> > Can anyone help please?
> 
> This best thing to do is to write to your ISP and get them to renew the
> certificate. That should prompt Evolution to ask you again for the new
> certificate.

I think they will do it anyway, however this will probably take
sometime, and I don't think my complain will change the duration.

However, I consider this a real bug in evolution, as many may use custom
servers with custom CA and one can always hit the wrong button. A good
SW should always provide a way to recover an error when possible.

For info: I've got the message for another mail account [1] (seems to be
per account not per server)

Cheers,

[1] SSL Certificate for 'smtp-auth.sfr.fr' is not trusted. Do you wish
to accept it?

Detailed information about the certificate:
   Issuer:       CN=GlobalSign Organization Validation CA -
G2,O=GlobalSign nv-sa,C=BE
   Subject:      CN=smtp.sfr.fr,O=SOCIETE FRANCAISE DU RADIOTELEPHONE -
SFR,OU=PFS_FIXES,L=PARIS,ST=PARIS,C=FR
   Fingerprint:  58:4c:00:37:cc:06:be:dd:c3:9d:d8:f8:77:39:e0:0b
   Signature:    BAD

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: