Re: Import root certificate

2014-11-22 Thread Adrian Godfrey
Friday, November 21, 2014, 11:02:02 PM, you wrote:

 It can be done through the Address Book, but it's simpler to switch to
 CryptoAPI in Options - S/MIME and TLS.

Options  looks easier, but then I get server host name does not match
the certificate and the mail does NOT get sent

If  I  don't  change anything at all, I get the nag about untrusted,
but  the  mail  gets  sent. All I can do here is OK or cancel. The
other options are visible but all greyed out.

I  can  even  see  that certificate in the account log whether I change
nothing or check CryptoAPI instead of internal.

I have four domains from the same ISP. The certificate is the same, but
it's  four  different  SMTP servers, none of which of course match the
certificate.

Surely there has to be an easier way than creating address book entries
for  each  email  account  and  importing  the certificate into each of
those.

I'm not totally blocked, but it's an extra confirm every time I send
mail from my own domain(s).

Adrian
...



Current version is 6.6 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: Import root certificate

2014-11-22 Thread MFPA
Hi


On Saturday 22 November 2014 at 1:14:23 PM, in
mid:15610363064.20141122141...@ags.lu, Adrian Godfrey wrote:



 I have four domains from the same ISP. The certificate
 is the same, but it's  four  different  SMTP servers,
 none of which of course match the certificate.

Are you running the SMTP servers, or are they? 

If they are running them and the certificate does not match the server
name you are using to connect, are you perhaps using an alias and the
server is also known by the name that matches the certificate?

If you are running the servers, maybe you should create your own
certificates for each domain, and get them signed by StartCOM (or
another CA of your choice).



 Surely there has to be an easier way than creating
 address book entries for  each  email  account  and
 importing  the certificate into each of those.

I would have thought the root certificate belonged in a single AB
entry in the Trusted Root address book. (Assuming you have done your
due diligence and came to the decision you actually do trust the
certificate and the CA behind it.)

-- 
Best regards

MFPAmailto:2014-667rhzu3dc-lists-gro...@riseup.net

Don't cry because it is over - smile because it happened

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Service Pack 3 



Current version is 6.6 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html