Re: Upgrade to Win10: Certificates lost

[MFPA]

Hi


On Tuesday 22 March 2016 at 4:39:32 AM, in
, Thomas Fernandez wrote:



> How do I get TB! to find the cert adb?

Tools | Address Book | View | Certificate Aggress Books

-- 
Best regards

MFPA  

Volvo, Video, Velcro. (I came, I saw, I stuck around.)

Using The Bat! v7.1.18 on Windows 10.0 Build 10586  



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[MFPA]

Hi


On Tuesday 22 March 2016 at 9:14:14 PM, in
<mid:96313243.2016031...@eternallybored.org>, Jernej Simončič
wrote:



Options ->> S/MIME and TLS -> select Microsoft CryptoAPI.  



Just for the record, I am using TB! 7.1.18 on Windows 10 with Avast 
Free Antivirus 11.1.2253, with TB!'s Internal Implementation selected 
for S/MIME and TLS certificates. My Trusted Root CA address book 
contains three certificates for Avast and my intermediate CA AB 
contains one. 


-- 
Best regards

MFPA  <mailto:2014-667rhzu3dc-lists-gro...@riseup.net>

Vegetarian: Indian word for lousy hunter!!!

Using The Bat! v7.1.18 on Windows 10.0 Build 10586  



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Thomas Fernandez]

Hello Jernej,

On Tue, 22 Mar 2016 22:14:14 +0100 GMT (23-Mar-16, 04:14 +0700 GMT),
Jernej Simončič wrote:

> On Tuesday, March 22, 2016, 14:48:49, Thomas Fernandez wrote:

>> How would I do that? - I do like avast!, and I don't know whether
>> Windows Defender is as good.

Options ->> S/MIME and TLS -> select Microsoft CryptoAPI.

Thanks; Anton already mentioned this. I will try in the office and
will report back.

-- 

Cheers,
Thomas.

http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 7.1.18.2 (BETA)
under Windows 7 6.1 Build 7601 Service Pack 1



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Jernej Simončič]

On Tuesday, March 22, 2016, 14:48:49, Thomas Fernandez wrote:

> How would I do that? - I do like avast!, and I don't know whether
> Windows Defender is as good.

Options -> S/MIME and TLS -> select Microsoft CryptoAPI.

-- 
< Jernej Simončič ><><><><>< http://eternallybored.org/ >

Find out the cost before you get in.
   -- Taxi Principle



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Feli Wilcke]

Hello Thomas, 

Am 22. März 2016 14:48:49 MEZ, schrieb Thomas Fernandez <thomas.gm...@gmx.net>:
 
>> Your antivirus is doing a MITM attack on the connection, which is why
>> it's failing.
... 
>I disabled avast! in the office, and could use the computer without
>problems. Windows 10 automtically enables Windows Defender when no
>other antivirus is enabled, so I was reasonably safe (I hope).

I'm using NOD32 for ages (it was suggested on the german list some years ago) 
and had no problems at all with certificates when switching to W10. 
-- 
regards, 
Feli 


Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Thomas Fernandez]

Hello Jernej,

On Tue, 22 Mar 2016 12:00:44 +0100 GMT (22-Mar-16, 18:00 +0700 GMT),
Jernej Simončič wrote:

> On Tuesday, March 22, 2016, 5:39:32, Thomas Fernandez wrote:

>>  22-Mar-16, 11:26:51: FETCH - Issuer: generated by avast! antivirus for
>> SSL/TLS scanning, avast! Web/Mail Shield, avast! Web/Mail Shield Root.

> Your antivirus is doing a MITM attack on the connection, which is why
> it's failing.

Thanks, that was it!

I had already download that TB! version again and reinstalled, hoping
that the certificates will show up in the ABD, but they didn't.
Checking here on my home PC, I don't see any certs in the RootCa
addressbook either...

I disabled avast! in the office, and could use the computer without
problems. Windows 10 automtically enables Windows Defender when no
other antivirus is enabled, so I was reasonably safe (I hope).

I only wonder why there was no MITM problem with avast! under Windows
8, and it suddenly appeared after the Windows upgrade.

> It might work if you switch TB to use the Windows certificate store,
> but such MITM actually leaves you more vulnerable.

How would I do that? - I do like avast!, and I don't know whether
Windows Defender is as good.

-- 

Cheers,
Thomas.

http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 7.1.18.2 (BETA)
under Windows 7 6.1 Build 7601 Service Pack 1



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Thomas Fernandez]

Hello Anton,

On Tue, 22 Mar 2016 17:55:42 +0500 GMT (22-Mar-16, 19:55 +0700 GMT),
Anton Belenki wrote:

>> you can also try to enable option (Options/S/MIME and TLS...), which is 
>> shown in screenshot.

> screenshot didn't attach.

> go to Options/S/MIME and TLS... and set Microsoft CryptoAPI.

I see... Thanks, I'll try tomorrow in the office.

Note: I had sent my original request by Gmane, as this email account
is not set up on my office computer. I could create a new topic and
read replies, but could not any reply with Gmane - but that is sure
off-topic here.

-- 

Cheers,
Thomas.

http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 7.1.18.2 (BETA)
under Windows 7 6.1 Build 7601 Service Pack 1



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Anton Belenki]

> you can also try to enable option (Options/S/MIME and TLS...), which is shown 
> in screenshot.

screenshot didn't attach.

go to Options/S/MIME and TLS... and set Microsoft CryptoAPI.

--
E-mail: lowtru...@lowtrucks.net
Web site: http://lowtrucks.net/



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Anton Belenki]

> !22-Mar-16, 11:26:51: FETCH - TLS handshake failure. Invalid server
> certificate. The certificate or one of the certificates in the certificate
> chain does not have a valid signature.

you can also try to enable option (Options/S/MIME and TLS...), which is shown 
in screenshot.

it once helped to resolve my certificate problems.

--
E-mail: lowtru...@lowtrucks.net
Web site: http://lowtrucks.net/
Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Upgrade to Win10: Certificates lost

[Jernej Simončič]

On Tuesday, March 22, 2016, 5:39:32, Thomas Fernandez wrote:

>  22-Mar-16, 11:26:51: FETCH - Issuer: generated by avast! antivirus for
> SSL/TLS scanning, avast! Web/Mail Shield, avast! Web/Mail Shield Root.

Your antivirus is doing a MITM attack on the connection, which is why
it's failing. It might work if you switch TB to use the Windows
certificate store, but such MITM actually leaves you more vulnerable.

-- 
< Jernej Simončič ><><><><>< http://eternallybored.org/ >

The faster the plane, the narrower the seats.
   -- Durrell's Parameter



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Upgrade to Win10: Certificates lost

[Thomas Fernandez]

Hello TBUDL,

I upgraded to Windows 10, and now I cannot download emails with TB! 6.8.8
any more.

Account log shows this: 

 22-Mar-16, 11:26:51: FETCH - receiving mail messages
 22-Mar-16, 11:26:51: FETCH - Connecting to POP3 server pop.gmx.net on port 995
 22-Mar-16, 11:26:51: FETCH - Initiating TLS handshake
 22-Mar-16, 11:26:51: FETCH - Certificate S/N:
0D2F3AAD3A6D8B4D8D7B8DD38C0CCCF5, algorithm: RSA (2048 bits), issued from
12-Nov-13 10:19:29 to 17-Nov-16 23:59:59, for 2 host(s): pop.gmx.net,
pop.gmx.de.
 22-Mar-16, 11:26:51: FETCH - Owner: DE, 1&1 Mail & Media GmbH,
Rhineland-Palatinate, Montabaur, server-ce...@1und1.de, pop.gmx.net.
 22-Mar-16, 11:26:51: FETCH - Issuer: generated by avast! antivirus for
SSL/TLS scanning, avast! Web/Mail Shield, avast! Web/Mail Shield Root.
!22-Mar-16, 11:26:51: FETCH - TLS handshake failure. Invalid server
certificate. The certificate or one of the certificates in the certificate
chain does not have a valid signature.

I checked, the RootCA.abd file is in my TB! directory, but when I go to the
Addressbook in the TB!, no certs are shown. (Unfortunately, TB! still does
not give the option to manually override and download the mail anyway, even
if the cert is invalid).

How do I get TB! to find the cert adb?

__ 

Cheers,

Thomas.



Current version is 7.1 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Certificates

[Leonard S. Berkowitz]

On Sunday, July 27, 2014, 8:28:31 PM, MFPA (tbudl@thebat.dutaint.com) wrote:

 Try https://en.wikipedia.org/wiki/X.509, although even that goes
 into lots more detail and less broad-brush info than I would like in
 an overview.

Thank you very much.
-- 
Leonard S. Berkowitz


Using The Bat! v5.2.2 on Windows 7 6.1 Build 7601 Service Pack 1



Current version is 6.1.8 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Certificates

[MFPA]

Hi


On Sunday 27 July 2014 at 4:49:26 AM, in
mid:17910141639.20140726234...@gmail.com, Leonard S. Berkowitz
wrote:


 Because of the recent traffic about certificates, I
 tried to find out some general information about
 certificates. The Help facility in TheBat is not much
 help with general information, only how to view and
 maintain certificates.

 Is there some place where I can read some general
 information about certificates and why I need them or
 need to bother with them?


Searching, at least on any search terms I can think of, seems to only
yield technical descriptions of TLS aimed mainly at people running
servers rather than their userbase, or promotional spiel from those
trying to charge to sign your certificate.

Try https://en.wikipedia.org/wiki/X.509, although even that goes
into lots more detail and less broad-brush info than I would like in
an overview.

In addition to connecting to a server via TLS/SSL, certificates can 
also be used to digitally sign or encrypt emails. 


-- 
Best regards

MFPAmailto:2014-667rhzu3dc-lists-gro...@riseup.net

A picture is a poem without words

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Service Pack 3 



Current version is 6.1.8 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Certificates

[Leonard S. Berkowitz]

Because of the recent traffic about certificates, I tried to find out
some general information about certificates. The Help facility in
TheBat is not much help with general information, only how to view and
maintain certificates.

Is there some place where I can read some general information about
certificates and why I need them or need to bother with them?

Thanks.

-- 
Leonard S. Berkowitz


Using The Bat! v5.2.2 on Windows 7 6.1 Build 7601 Service Pack 1



Current version is 6.1.8 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: Importing trusted and intermediate certificates

[Andrew Diederich]

Hello Chris,

Thursday, August 24, 2006, 8:40:47 PM, you wrote:

 Chris W. @ 2006-8-24 10:37:23 PM
 Importing trusted and intermediate certificates
 mid:[EMAIL PROTECTED]

 If I File  Import... I get a popup error No addresses have been
 imported. I can manually make an entry in the address book, and
 import the cert that way, but that seems very tedious and manual.

 Confirmed.

 But only for ASCII certificates. Binary ones seem to work just fine.

Good catch -- I always use base 64 encoded certs, so I hadn't tried
the der certs.  While the address book info imports fine, it does not
actually import the certificate it grabbed the information from!  You
have to find the entry in the address book it created, go to the
certificates tab, then import the certificate again.  This time you
can use either ascii or binary certs.

-- 
Andrew Diederich
Using Voyager v3.80.04 on Windows XP 5.1 Build  2600
Service Pack 2



Current version is 3.80.06 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Importing trusted and intermediate certificates

[Andrew Diederich]

Hello Batfolk,

Some people I regularly get email from have S/MIME signed emails from
StartCom (http://cert.startcom.org).  StartCom has only recently
passed their security audit, so their root and intermediate CA certs
aren't included in TB.  How do I import their x509 certs into TB?

I can't drag the cert into the Intermediate CA or Trusted Root CA
sections of the address book, since that just adds the cert to the
existing entry I happen to hit.  If I File  Import... I get a popup
error No addresses have been imported.  I can manually make an entry
in the address book, and import the cert that way, but that seems very
tedious and manual.  Is there a better way?

Thanks for the help.

-- 
Andrew Diederich
Using Voyager v3.80.04 on Windows XP 5.1 Build  2600
Service Pack 2



Current version is 3.80.06 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Importing trusted and intermediate certificates

[Chris W .]

Andrew Diederich @ 2006-8-24 7:08:21 PM
Importing trusted and intermediate certificates mid:[EMAIL PROTECTED]

 If I File  Import... I get a popup error No addresses have been
 imported. I can manually make an entry in the address book, and
 import the cert that way, but that seems very tedious and manual.

Confirmed.

-- 
Chris

Using The Bat! v3.80.06 on Windows XP 5.1 Build 2600 Service Pack 2.
Accessing a POP3 mailbox.

If the cops arrest a mime do they tell him or her that he or she has
the right to remain silent?

pgpxomQkPvBvp.pgp
Description: PGP signature

Current version is 3.80.06 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Importing trusted and intermediate certificates

[Chris W .]

Chris W. @ 2006-8-24 10:37:23 PM
Importing trusted and intermediate certificates mid:[EMAIL PROTECTED]

 If I File  Import... I get a popup error No addresses have been
 imported. I can manually make an entry in the address book, and
 import the cert that way, but that seems very tedious and manual.

 Confirmed.

But only for ASCII certificates. Binary ones seem to work just fine.

-- 
Chris

Using The Bat! v3.80.06 on Windows XP 5.1 Build 2600 Service Pack 2.
Accessing a POP3 mailbox.

No matter how hard you try, you cannot cram infinity into 32 bits.
-Carl Zimmerman

pgpevwpl8h4eK.pgp
Description: PGP signature

Current version is 3.80.06 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Root certificates

[Thomas Fernandez]

Hello TBUDL,

During mail download I get the pop-up that the root certificate could
not be found. Checking the AB, both intermediate and root are not
there.

ItermCA.abd and RootCA.ABD are in the same directory as TheBat.abd and
my personal AB. ADDRBOOK.INI has these .ABD files listed. This is
what it looks like:

/
[Columns]
Count=6
Column #1=200:-1
Column #2=30:-6
Column #3=160:-100
Column #4=100:1
Column #5=100:4
Column #6=100:9

[Profile]
ID=The Bat! address book profile
CA Books=0
Address Books=4
Sort=-101
SortReverse=0
Last Book=E6E25E88-BA5B46A3-FD482B2C
Default Book=E6DFFC2E-8049C082-98BF8887
Default=1
Address Book #1=IntermCA.ABD
Address Book #2=TheBat.ABD
Address Book #3=RootCA.ABD
Address Book #4=UTCC.ABD

[Window]
Top=58
Left=44
Width=576
Height=455
Separator=185

\

How do I get my certificates back? Importing the files into the AB
window didn't work.

-- 
Cheers,
Thomas.

The closest I ever got to a 4.0 in high school was my blood alcohol
content.
http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 3.80.03
under Windows XP 5.1 Build 2600 Service Pack 2



Current version is 3.80.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Root certificates

[Michael Geyer]

Hi Thomas and list,

On Sunday, May 7, 2006 at 22:30:48 GMT +0700 (which was 17:30 where I
live) Thomas Fernandez wrote (at least in parts) and made these
valuable points on the subject of Root certificates:

 During mail download I get the pop-up that the root certificate could
 not be found. Checking the AB, both intermediate and root are not
 there.

Some time ago I lost those two also. After some 'messing around' (it
was a real mess afterwards) with importing certifivates from my
notebook-installation I decided to get rid of this installation
completely and did a clean install of a distribution version of TB.

That did the trick. I only had to import one personally imported
root-certificate of my ISP's mail server.

-- 
Regards
Michael

powered by The BAT! 3.72.12 (Beta), , and MyMacros 1.11a
with usual problems of Windows ME  Pro 4.90 Build 3000  



Current version is 3.80.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Root certificates

[Thomas Fernandez]

Hello Michael,

On Sun, 7 May 2006 18:54:45 +0200 GMT (07/05/2006, 23:54 +0700 GMT),
Michael Geyer wrote:

MG Some time ago I lost those two also. After some 'messing around' (it
MG was a real mess afterwards) with importing certifivates from my
MG notebook-installation I decided to get rid of this installation
MG completely and did a clean install of a distribution version of TB.

MG That did the trick.

Just a normal install over the existing TB as with updates?

-- 

Cheers,
Thomas.

Subway: We Are Not Public Transportation, Dammit
http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 3.80.03
under Windows XP 5.1 Build 2600 Service Pack 2






Current version is 3.80.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Root certificates

[Thomas Fernandez]

Hello Thomas,

On Mon, 8 May 2006 00:03:00 +0700 GMT (08/05/2006, 00:03 +0700 GMT),
Thomas Fernandez wrote:

MG Some time ago I lost those two also. After some 'messing around' (it
MG was a real mess afterwards) with importing certifivates from my
MG notebook-installation I decided to get rid of this installation
MG completely and did a clean install of a distribution version of TB.

MG That did the trick.

TF Just a normal install over the existing TB as with updates?

This worked and brought the certificate ABs back. However, now my
Personal AB was empty, and the additional AB I had created completely
gone from within TB (whilst still on the HD, and the .ini pointed to
them).

This time, I could import the addresses from the file on disk into the
Personal AB entry in the AB window.

For the other AB, the only thing that helped was to go to File / Open
in the AB window, and when I opened the .abd file from the disk, the
entry for this AB entry suddenly showed up in the AB list, and all
addresses showed up.

So, everything is working now to my satisfaction. However, it was a
bit weird to get there.

-- 

Cheers,
Thomas.

Nothing is fool-proof to a sufficiently talented fool.
http://thomas.fernandez.hat-gar-keine-homepage.de/

Message reply created with The Bat! 3.80.03
under Windows XP 5.1 Build 2600 Service Pack 2






Current version is 3.80.03 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Trusted Root CA address book - most entries have no certificates

[MFPA]

Hi

On Monday 6 December 2004 at 1:38:39 PM, MFPA wrote:


   I have 104 entries in my Trusted Root CA address book but only
   14 of them have certificates. Is this normal?

Nobody has replied here but the issue is discussed at 
https://www.ritlabs.com/bt/view.php?id=4049

-- 
Best regards,
 
MFPAmailto:[EMAIL PROTECTED]

Using The Bat! v3.0.1.33 on Windows XP 5.1 Build 2600 Service Pack 1



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Trusted Root CA address book - most entries have no certificates

[MFPA]

Hi

  I have 104 entries in my Trusted Root CA address book but only
  14 of them have certificates. Is this normal?

-- 
Best regards,
 
MFPA   mailto:[EMAIL PROTECTED]

Using The Bat! v3.0.1.33 on Windows XP 5.1 Build 2600 Service Pack 1



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Using Thawte Certificates

[Barry Wilkinson]

Can anyone tell me how to use/import a Thawte Personal Freemail certificate into The 
Bat! for use
with s/mime?

The Thawte site only shows certs for IE, OE... not The Bat!

Am I missing something?


-- 

Best regards,

Barry
-

Using The Bat! v3.0.0.14 on Windows 2000 5.0 Build  2195
Service Pack 4



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Using Thawte Certificates

[Martin Webster]

 
Hello Barry,

On 14 September 2004, 16:30 Barry Wilkinson [BW] in
mid:[EMAIL PROTECTED] wrote:

BW Can anyone tell me how to use/import a Thawte Personal Freemail
BW certificate into The Bat! for use
BW with s/mime?

BW The Thawte site only shows certs for IE, OE... not The Bat!

If I recall correctly, I imported the X.509 certificate into my browser
(Opera) by opening the link provided by Thawte with the issuing e-mail.
Next step is to export this as a file to somewhere handy so you can get
it into TB! For Opera, go into Tools - Preferences - Security -
Manage certificates and click on Export.

Now, open TB! and open Account... - Properties - Edit personal
Certificates and import the file you've just saved. Is this is
successful you will see the certificate. Now click Generate and type in
the passphrase used when requesting the certificate.

Of course, the certificate has little value until your name appears on
it... you'll need either use the Web of Trust or remote authentication
to change that.


-- 
Best regards,
Martin Webster
Jabber mjw | ICQ 15893823

The Bat! Version 3.0.0.14
Windows XP Professional 5.1 Build 2600 Service Pack 2

Quote of the day:
Example moves the world more than doctrine. HENRY MILLER



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Using Thawte Certificates

[Maurice Snellen]

On Tuesday, September 14, 2004 at 16:30 (which was Tuesday, September
14, 2004 at 17:30 where I am) Barry Wilkinson [BW] wrote:

BW Can anyone tell me how to use/import a Thawte Personal Freemail
BW certificate into The Bat! for use with s/mime?

Just proceed with getting your certificate from Thawte for either IE
or any other browser you normally use. Then, after you have completed
the whole process, go into the certificate manger of the browser and
export the newly received certificate to a file. Don't forget to put a
strong password on the file, as you'll be exporting the private key as
well.

Then, from The Bat! you can import the certificate from the file you
exported it to.

-- 
Greetings,
Maurice

Windows XP 5.1 Build 2600 Service Pack 2
The Bat! v3.0.0.11; BayesIt! 0.6.21; Bayes Filter Plugin v1.5.4; AJS
v0.6; MyMacros 1.11a; Useless Macro Collection 1.6.662/beta



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Using Thawte Certificates

[Barry Wilkinson]

Hello Martin  Maurice,

Tuesday, September 14, 2004, 4:55:15 PM, Martin wrote:

 If I recall correctly, I imported the X.509 certificate into my browser
 (Opera) by opening the link provided by Thawte with the issuing e-mail.
 Next step is to export this as a file to somewhere handy so you can get
 it into TB! For Opera, go into Tools - Preferences - Security -
 Manage certificates and click on Export.

I had tried this but when I tried to export the certificate, IE would not let me 
export the private
key. I created a new certificate and that exported OK. Not sure what happened here?

 Now, open TB! and open Account... - Properties - Edit personal
 Certificates and import the file you've just saved. Is this is
 successful you will see the certificate. Now click Generate and type in
 the passphrase used when requesting the certificate.

I cannot find any reference to 'Edit personal certificates' in that path?


Many thanks for your replies.


-- 

Best regards,

Barry
-

Using The Bat! v3.0.0.14 on Windows 2000 5.0 Build  2195
Service Pack 4



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: Using Thawte Certificates

[Barry Wilkinson]

Hello Martin  Maurice,

Tuesday, September 14, 2004, 6:23:51 PM, I wrote:

 I cannot find any reference to 'Edit personal certificates' in that path?

Problem solved. It must be an Operating System difference. After I exported the cert, 
right clicking
enable me to 'store' the cert. After that The Bat! could see it.

Many thanks.


-- 

Best regards,

Barry
-

Using The Bat! v3.0.0.14 on Windows 2000 5.0 Build  2195
Service Pack 4



Current version is 3.00.00 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

certificates and servers- at wits end...

[RedLeg]

Hello List!

I've been lurking the list(s) since December (when I bought TB1.62r) and
had a couple forays into the archives but have not yet found a way to
get SSL/TLS working for me on any servers with that capability.

I really need your help here- detailed steps, if possible, would be most
appreciated.  The first day TB!2 became available for upgrade I jumped
as well used every beta since December in an attempt to get this to
work.

About my 3 problem mail accounts:

AKO- us.army.mil is POP3, IMAP4 (preferred), and SMTP, all SSL secure to
dedicated and require authentication for use. Server Cert is DOD issued
and the entire chain has been imported to system trusted root store.

MRB- .myrealbox.com is POP3, IMAP4 (preferred), and SMTP all allow
secure to dedicated and StartTLS option, I have to authenticate to SMTP
to send past my ISP... Server cert is Comodo issued but has a goofy
*.myrealbox.com server name that TB refuses to entertain. I'm not sure
how to import their cert to system trusted root store- I don't know how
to download a .p* or .cer from the site...

Cotse- pop.cotse.com (POP3) and www.cotse.net (SMTP) only and allow
secure to dedicated port and StartTLS option.  The POP cert is a self CA
job and the SMTP cert is issued by Equifax.  I have requested they send
me a copy of the certs used so I can import them to root...

More about my ultra-frustrating problem g On AKO I can finally direct
connect to pop and imap, not sure what happened here to allow this, but
I cannot send SMTP secure (I can send plain though)... I really need the
dialog box that pops up and asks to trust this cert to have an enabled
'add to trusted' button. TB continues to complain of the certificate
heirarchy...  Getting this one working properly is critical, especially
smtp since the pop and imap work when I keep eyes on for popup dialog...

On MRB I get absolutely nowhere, TB complains of server and cert not
matching pop3/imap/smtp.myrealbox.com is server name, *.myrealbox.com is
the cert name presented... I really need to get this one working, at
least to prompt me for permission rather than silently fail- every
single time...

On COTSE, neither the pop nor the smtp work, the failure is during the
TLS handshake and again is silent- no user prompt to accept nor add to
trusted.

Is there really any reason this process has not been made simple to the
point of fool proof? (maybe a post to tbbeta about that;)

I use JBMail3.2 off a USBkey drive and it works flawlessly, asking me
the first time if I want to trust the cert and making a hash of it from
there, once done- there are no issues unless there is a change.

I must say I love TB, especially since IMAP has developed so nicely, but
when I bought it in Dec- the version change log was what made me decide
TB was for me and that was the exceptional (sounding) SSL/TLS support as
well integrated certificate function and PGP support.

ok, I know I talk alot, especially for my first post and all- but if you
can feel my pain I beg you to reply as detailed as my described plight
is...

-- 
Most Sincerely,
 Mark (aka- Army RedLeg)

Using TheBat! 2.00.6 on Win2ksp3+ (plus all patches:)



Current version is 2.00 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Mailserver Certificates

[Jeffrey Lebowski]

Hello ,

How can I import SSL Certificates for the mail servers of my mail
Provider?
-- 
Best regards,
 Jeffrey  mailto:[EMAIL PROTECTED]



Current version is 1.62r | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Dierk Haasis]

Hello James!

On Friday, December 27, 2002 at 7:17:32 AM you wrote:

 Does version 2 have any anticipated release date?

Somewhere in the future. Sorry, the only thing known about the release
date is that the developers wok hard on it.

 Hopefully soon? I keep hearing of people reporting problems and
 shortcomings with this version and that version that are supposedly
 fixed in version 2, but I don't believe I've heard any official
 word from RITLabs about what new features / bug fixes are in version
 2 and when they believe they'll have either the beta or final
 product ready.

There once was an interview Marck conducted. Most of what was promised
then has now been become part of 1.6x.

BTW, there are not many bugs left in TB, and the shortcomings have
more to do with certain aspects users want.




-- 
Dierk Haasis

The Bat 1.62 Christmas Edition on Windows XP 5.1 2600Service Pack 1

Wer von anderen nichts erwartet, darf sich nicht wundern, wenn er
nichts erhält. (Aleks Papst)



Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

[problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Aldo P. Solari [APS]]

Dear all, we are attempting to use TheBat (v 1.62) to a secure
IMAP server at the university campus.

I dont know how many hours I have lost in this matter. There is
no way I can connect. I have tested all of the alternatives but
it wont go.

Netscape Mail and Outlook Express are really lousy programs but
they do this automatically (exchange certificates and connect to
the IMAP secure server *flawlessly*).

I have exported the certificates (both mine and the one from the
university server) from IExplorer, imported them to TheBat and
put them into the Trusted address book. I attempted to connect 
either through IMAP on port 995 or POP3 on port 993 and have used 
all of the alternativa/combinations given by TheBat. Nogo. Nogo.

Could you advice, please, on what I should do ?

To me, it is amazing how this can be done automatically on lousy
email programs and it is -- so  -- difficult to do with TheBat.

The mailserver is aguayro.ulpgc.es or aguayro.gestion.ulpgc.es

Please, don tell me ask your sysop because they just deny the 
possibility to use other email programs then the ones they chose.

Any help will be *mostly* appreciated. Thank you.

Merry xmas to all.

Cheers,

	APS





Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Dierk Haasis]

Hello Aldo!

On Thursday, December 26, 2002 at 11:47:42 AM you wrote:

 Could you advice, please, on what I should do ?

Well, TB 1.x does support IMAP only very rudimentary, it will connect
to the server and download mail. Actually IMAP in TB is currently
nothing more than POP3 via IMAP server.

Version 2 is said to have complete IMAP support.



-- 
Dierk Haasis

The Bat 1.62 Christmas Edition on Windows XP 5.1 2600Service Pack 1

The First Amendment presupposes that right conclusions are more likely
to be gathered out of a multitude of tongues, than through any kind of
authoritative selection. (Judge Learned Hand as cited in New York
Times v. Sullivan)



Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Luigi Rosa]

Hello Dierk,
Thursday, December 26, 2002, 11:59:20 AM, you wrote:

DH Well, TB 1.x does support IMAP only very rudimentary, it will connect
DH to the server and download mail. Actually IMAP in TB is currently
DH nothing more than POP3 via IMAP server.

DH Version 2 is said to have complete IMAP support.

It's not just IMAP problem. The same happens with POP3 using TLS protocol.

I had to get and installa manually the certificate of my ISP in order to
establish a secure communication.

Is this a missing feature, or is a deliberate behaviour?


Ciao,
Luigi

-- 

Using The Bat! v1.62 Christmas Edition
On Windows XP 5.1 Build 2600 Service Pack 1




Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Dierk Haasis]

Hello Luigi!

On Thursday, December 26, 2002 at 1:55:59 PM you wrote:

 It's not just IMAP problem. The same happens with POP3 using TLS protocol.

 I had to get and installa manually the certificate of my ISP in order to
 establish a secure communication.

 Is this a missing feature, or is a deliberate behaviour?

I'd say it's a problem with secure connections. You see, to establish
one, you need a server supporting it and the correct implementation
incl. certificates.

A feature of TB is to use the best secure method even if the server
doesn't use it. But in one of the last versions that was changed to
revert to the next possible authentication, AFAIK. When TB connects to
one of my mail servers (don't know if it is POP or SMTP) the log
always shows unknown authentication method but TB nonetheless
connects.

Sorry to be that vague, but this is more a question for some of our
more tech savvy members, who seem to be vacationing.



--
Dierk Haasis

The Bat 1.62 Christmas Edition on Windows XP 5.1 2600Service Pack 1

Yes, *you* can make a difference. You just have to *do* something ...
anything. (Derek Leveret)



Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[Adam]

Hello Aldo,

Thursday, December 26, 2002, 7:17:42 AM, you wrote:

APSA Dear all, we are attempting to use TheBat (v 1.62) to a secure
APSA IMAP server at the university campus.

APSA I dont know how many hours I have lost in this matter. There is

Very sorry to hear.

APSA no way I can connect. I have tested all of the alternatives but
APSA it wont go.

There really isn't anything special you need to be doing to receive
mail.  You could always post what error message you get.

APSA Netscape Mail and Outlook Express are really lousy programs but
APSA they do this automatically (exchange certificates and connect to
APSA the IMAP secure server *flawlessly*).

APSA I have exported the certificates (both mine and the one from the
APSA university server) from IExplorer, imported them to TheBat and
APSA put them into the Trusted address book. I attempted to connect 
APSA either through IMAP on port 995 or POP3 on port 993 and have used 
APSA all of the alternativa/combinations given by TheBat. Nogo. Nogo.

APSA Could you advice, please, on what I should do ?

There are few options you can tinker with. Seems like something is up
with your provider.  Maybe if your provider can provide technical
details on how they operate, someone here might be able to interpret
it.

APSA Please, don tell me ask your sysop because they just deny the 
APSA possibility to use other email programs then the ones they chose.

We'd never say that!  G

-- 
Best regards,
 Adam 



Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re[2]: [problems (IMAP, secure pop3, certificates, etc.)/help needed]

[James Olsen]

Hello Dierk,

DH Version 2 is said to have complete IMAP support.

I too fell victim to spending hours trying to figure out why my newly
installed stunnnel and openssl programs and libraries were not working
with TheBat. They don't work with Eudora either. But, they work just
fine with Outlook. I scanned the TB mailing list and found someone
else mentioning that openssl changed the protocol negotiation slightly
and broke how TB works for pop3s. I'm now trying to apply a
work-around.

Does version 2 have any anticipated release date? Hopefully soon? I
keep hearing of people reporting problems and shortcomings with this
version and that version that are supposedly fixed in version 2, but
I don't believe I've heard any official word from RITLabs about what
new features / bug fixes are in version 2 and when they believe
they'll have either the beta or final product ready.

Does anyone have a list of features/bugs and a preliminary (subject to
change) release date for an alpha, beta, or final product?

Thanks for passing it along :)

--James




Current version is 1.62 | Using TBUDL information:
http://www.silverstones.com/thebat/TBUDLInfo.html

SSL and certificates

[Rgis Lhoste]

Hello !

I've a little question.

I want to get my e-mails via pop thought ssl/tsl.
I have imported certificate and had it to my trusted root CA folder in
the address book. The certificate is imported correctly.

Problem : I doesn't work !!!

The Bat say to me that the certificate is not valid and the emitter of
the certificate is unknown ...

Any idea ?

Thanks

Régis

  

-- 
[EMAIL PROTECTED]

LORIA - INRIA Lorraine
Bureau B-102
Campus Scientifique
B.P. 239
54506 VANDOEUVRE-lès-NANCY CEDEX



Current Ver: 1.61
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

Self-signed SSL certificates

[Ralf van der Enden]

Hi,

I've been testing The Bat! with TLS/SSL and it doesn't work. When I use OutLook 
Express it asks me if I wanna use the unsecure cert., but The Bat! simply sends the 
pop3 program a unkown ca error. Is there a setting I can enable so The Bat! will ask 
me the same question as Outlook Express or is this a known issue with The Bat!.

Thanks in advance for any replies.

Yours truly,
Ralf van der Enden

PS: I use The Bat! 1.60q



Current Ver: 1.60q
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

Re: Self-signed SSL certificates

[Peter Palmreuther]

Hello Ralf,

On Thursday, June 27, 2002 at 9:18:11 AM you [RvdE] wrote (at least in
part):

RvdE Is there a setting I can enable so The Bat! will ask me the same
RvdE question as Outlook Express

No.

RvdE or is this a known issue with The Bat!.

Yes.

Additionally (yeah, here come the important part of the e-mail *G*)
there's a way you can tell TB! about this cert.

Create a new entry in your 'Trusted Root CA' (only visible if you have
activated 'Internal Implementation' in 'Options' / 'S/MIME').
Import the _private key_ of your self signed cert as certificate for
this entry.

If you have set up The Bat! using 'Microsoft CryptoAPI' for 'S/MIME'
you'll have to import the public key into the trusted root storage you
can see from within IE.
-- 
Regards
Peter Palmreuthermailto:[EMAIL PROTECTED]
(The Bat! v1.60q on Windows 2000 5.0 Build 2195 Service Pack 1)

Chamberlain loves the working man - he loves to see him work. - W.
Churchill



Current Ver: 1.60q
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

Re: Self-signed SSL certificates

[Ralf van der Enden]

Hi Peter,

Thanks for that quick response. I'll try to get that certificate imported. Haven't had 
luck with that before, but maybe I can do it by using MSIE.

Ralf



Current Ver: 1.60q
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

Re: Self-signed SSL certificates

[Peter Palmreuther]

Hello Ralf,

On Thursday, June 27, 2002 at 2:11:11 PM you wrote in
005501c21dd3$b9fa78a0$[EMAIL PROTECTED]">mid:005501c21dd3$b9fa78a0$[EMAIL PROTECTED] (at least in part):

 Thanks for that quick response. I'll try to get that certificate
 imported. Haven't had luck with that before, but maybe I can do it by
 using MSIE.

Works perfectly well with The Bat! address book when using internal S/MIME
(which I can only recommend as a few days ago it was discovered
MY-CryptoAPI S/MIME has some flaws that makes it unusable IMHO).

You'll need to put the text between and including

-BEGIN CERTIFICATE-
...
-END CERTIFICATE-

from your cert file (usually *.pem) into a text file. THIS is the public
key. 'BEGIN' and 'END' lines _are important_.
Name the file whatever you like, if you don't mind make it's extension .pem
too.
Now you should be able to import this file as certificate w/o any problems
into TB!-AB.
-- 
Regards
Peter Palmreuthermailto:[EMAIL PROTECTED]
(The Bat! v1.60q on Windows 2000 5.0 Build 2195 Service Pack 2)

Machines take me by surprise with great frequency. - Alan Turing



Current Ver: 1.60q
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/

S/MIME - CA Root certificates

[Peter Meyns]

Hi all,

in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] Colin Grant attached an
S/MIME sig that shows up bad - no, that's the PGP term - invalid here.
The reason given is:

,- [  ]
| The CA Root S/MIME certificate is not trusted because it is not in the
| Trusted Root CA address book
`-

Under Certification Path there is only the invalid sig.

Where or how do I get missing CA certs?

Regards
Peter
-- 



smime.p7s
Description: S/MIME Cryptographic Signature

Re[2]: S/MIME - CA Root certificates

[Colin Grant]

Hi, the certificate we are talking about here was generated by Bat 1.60
under Account, Preferences - Edit Personal Certificates. The signature
verification looks ok at this end but then I suppose it would as I
have generated the cert?

Apart from that, I'm lost

Colin

PS - I've signed this one also.



smime.p7s
Description: S/MIME Cryptographic Signature

Re: S/MIME - CA Root certificates

[Oleg Titov]

Hello Peter,
   try to visualize the certificate, take a look on issue, usually
   they put a reference to their web site. Visit that web site, look
   for instal CA certificate, download certificates, they should
   install automatically. Probably that would be a good idea to use
   IExplorer for that operation.

   If you could not find install CA certificates, try to locate
   latest CRL or Certificate Revocation List. The download would
   be bigger, but it also contains CA certificates. (btw, it's a good
   practice to update your CRLs).

   Regards,

   Oleg Titov
   

Thursday, April 11, 2002, 12:03:52 PM, you wrote:

PM Hi all,

PM in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] Colin Grant attached an
PM S/MIME sig that shows up bad - no, that's the PGP term - invalid here.
PM The reason given is:

PM ,- [  ]
PM | The CA Root S/MIME certificate is not trusted because it is not in the
PM | Trusted Root CA address book
PM `-

PM Under Certification Path there is only the invalid sig.

PM Where or how do I get missing CA certs?

PM Regards
PM Peter



-- 
Best regards,
 Olegmailto:[EMAIL PROTECTED]



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: S/MIME - CA Root certificates

[Colin Grant]

Peter, I think it was my fault. Is this any better?
Colin



smime.p7s
Description: S/MIME Cryptographic Signature

Re[3]: S/MIME - CA Root certificates

[Oleg Titov]

Hello Colin,
   it is not enough just to generate the certificate. You need to
   generate the Request from the same dialog window *and* submit it to
   Certification Authority for verification and later signing. The CA
   will respond to your request with file confirming your data. You'll
   install that file and after that you'll be able to use it without
   problem.

Regards,

Oleg

Thursday, April 11, 2002, 12:44:35 PM, you wrote:

CG Hi, the certificate we are talking about here was generated by Bat 1.60
CG under Account, Preferences - Edit Personal Certificates. The signature
CG verification looks ok at this end but then I suppose it would as I
CG have generated the cert?

CG Apart from that, I'm lost

CG Colin

CG PS - I've signed this one also.



-- 
Best regards,
 Olegmailto:[EMAIL PROTECTED]



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[2]: S/MIME - CA Root certificates

[Colin Grant]

Why TBOT - as this is a BAT specific problem I'd have thought this
was ok. Or am I missing something Peter.

Colin



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: S/MIME - CA Root certificates

[Peter Meyns]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Colin,

on Thu, 11 Apr 2002 18:44:35 +0100GMT (which was 11.04.02, 19:44 +0200GMT
where I live), you wrote in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] :

CG Hi, the certificate we are talking about here was generated by Bat 1.60
CG under Account, Preferences - Edit Personal Certificates. The signature
CG verification looks ok at this end but then I suppose it would as I
CG have generated the cert?

I begin to understand. In order to have your sig show up valid, I'd have
to add _you_ in my address book of trusted CA (Certification Authority).
Right. That's why it was the only option given here...

Colin, to get an S/MIME signature working, you need a verification from a
superior authority like Thawte or Verisign. This is the way the Web Of
Trust works wit5h S/MIME certs. Have a look at www.thawte.com .

It is different from PGP's web of trust, which relies on the users'
responsibility.
- --
Cheers
Peter

Winamp currently playing:  - silence -

-BEGIN PGP SIGNATURE-
Version: 6.5.8ckt Build 07  * PGP-signed for better authentication :-) *
Comment: Key available at http://www.meynsweb.com/public-key.txt

iQA/AwUBPLXF5gM2UgbhB3TOEQKYnQCfdYxT6ydPy4PQBGeBR0eUH5n25doAnR9g
Jnx5qd+VN5FcXyiZk7H8gCvd
=3rlO
-END PGP SIGNATURE-



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[4]: S/MIME - CA Root certificates

[Colin Grant]

-BEGIN PGP SIGNED MESSAGE-
Hash: MD5

Thanks, Oleg but how do I do that, in easy stages please. I can see
nothing in the dialogue window!!

Colin

-BEGIN PGP SIGNATURE-
Version: 2.6

iQCVAwUAPLXXy6na/SG6FYvxAQGxrQQAt+94KB6e3Rs6b/2ihlrVvc8EcCghc+fV
yqdvse56/tW6Yf2Eu9Dlnm2kRIAdl9rtt/0e+22emrgeWMkfh4wgdZphBk7zJ2Pi
b6Xj2HtYJ8lITzcIo60SzlBMbIHK27uOPSiKNoU9sCuL0lHeDU0xyoAdG/sCLXGR
a0unicLklEI=
=0iHG
-END PGP SIGNATURE-



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: S/MIME - CA Root certificates

[Gerrit Kiers]

 Hello ALL,

Thursday, April 11, 2002, 7:40:59 PM, Peter Meyns wrote:
PM My fault was to start this thread here. I intended to place it on TBOT, but
PM somehow I missed... Let's continue there. [EMAIL PROTECTED]

I don't consider this fully off topic...

Peter,
Your S/MIME sign is invalid since it claims that: The issuer of this chain is not
found.

But: I possess the same type of certificate as you have, meaning that I am also a
validated member of Thawte freemail program. I have my certificate installed on my
PC, and it is valid.

This means that i have installed the CA Root Authorities (Personal Freemail RSA
2000.08.30 and Thawte Personal Freemail CA) that are required to validate your
certificate. This is why I think your certificate should be valid *by default* on
my PC, but it isn't.

I can think of two possible causes.
1. The Bat fails to recognise the root CA installed on my PC.
2. Having them on the PC (encapsulated by micros~1) is not enough. I have to
install the root CA as well in the Addressbook of The Bat.

Any light?


-- 
Best regards,
Gerrit Kiers
Budapest, Hungary
[EMAIL PROTECTED]

 Using The Bat! v1.60c on Windows XP 5.1 Build 2600 



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Default for S/MIME certificates

[Matthias Appel]

Hello tbudl,

for one of my accounts I have two S/MIME certificates installed. Now I
want to change the default certificate and I wonder how to manage
this.

Is there any chance to modify the default within TB? Or is there maybe
a key in the registry which I can modify?

My first thought was to have a look in the account properties but I
found nothing :-( and the help doesn't help me at all )-:

-- 
Matthias

My opinions may have changed, but not the fact that I am right.

[ The Bat! v1.54/10 | Windows NT v5.0 Service Pack 2 ]


-- 

Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ: http://faq.thebat.dutaint.com 

S/MIME Certificates: Halloween International Notarisation Party

[Maxim Masiutin]

Hello All!

  Welcome to the Halloween International Notarisation Party on
  Wednesday October, 31 from 18:00 till 20:00 in Frankfurt/Main
  Germany. Please visit
  https://www.thawte.com/cgi/personal/wot/directory.exe?node=401 to
  find out more. Every attendee will become an experienced notary able
  to assign at least 15 trust points.

  For those unable to attend the Halloween International Notarisation
  Party, there will be another party in Cologne at The Bat! Forum on
  Sunday November 4th. Look for the WOT announcement in
  Nordrhein-Westfalen, Germany.
  

-- 
Maxim Masiutin
Vice President, Ritlabs S.R.L. 
http://www.ritlabs.com/


-- 

Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ: http://faq.thebat.dutaint.com 

Re: S/Mime Certificates

[Michael Richter]

Hello zefram,

you wrote in "S/Mime Certificates" on 09.11.2000:


 Does anyone know where and how I can get a S/Mime certificate for the
 use with The bat??


http://trust.web.de

-- 
Best regards,
Michael Richter  Bonn,Germany  http://www.godwana.de/thebat/
The Bat! 1.47 Halloween Edition [75E6E263] Windows NT Build 1381 



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

S/Mime Certificates

[zefram]

Does anyone know where and how I can get a S/Mime certificate for the
use with The bat??

regards
 Marcus
 
--

Using The Bat 1.48 Beta/3 
under Windows NT 5.0, build 2195, Service Pack 1

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re: About PGP certificates

[A . Curtis Martin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 27 Sep 2000 01:03:36 -0500, A . Curtis Martin wrote:

A - The editor uses something called 'free caret', which basically
A means that when you move your cursor down from a text line to an
A empty line, it keeps it position on the horizontal axis. In other
A words, it doesn't move to the beginning of the empty line but stays
A somewhere in the middle. Took me quite some time to get used to it,
A but now I hardly notice anymore. (This 'feature' will probably become
ACM
ACM:- Was that put in just for the Eudora fans? ;-b You seemed so
ACMupset with it initially.

Please ignore. Sorry about the inappropriate message. :-)

- --
A. Curtis Martin..
Moderator TBUDL/TBBETA  |  PGP Key ID: 0xEE079937
PGP Key: mailto:[EMAIL PROTECTED]?Subject=SendAlliePGPKey
- ---
** "Junk: stuff we throw away. Stuff: junk we keep. "

Using TB! v1.46d «» Win2k Pro SP1

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Digitally signed for message and sender verification.

iQA/AwUBOdGPbPAXeSHuB5k3EQI4qACg38ujVQJVT/RfLApco1fZzKzbgrgAoOat
oICIArQc3BXwxjy4y5dGlk0p
=gKar
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re: About PGP certificates

[Graham]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 27/09/2000 at 04:11, Ameng wrote:


Ameng Hello TBUDL!
Ameng   If I selected the Enable S/MIME at Account-Properties,
Ameng then will appear a warning message when i send a signed mail.
Ameng The warning message as follow:

Ameng "No signing certificate for [EMAIL PROTECTED]"
Ameng and
Ameng "No valid signing certificates. Cannot sign the message using S/MIME"

Ameng Who can tell me why and how to send a signed mail with S/MIME?
Ameng What's the meaning of S/MIME?

Ameng, PGP and S/MIME are two different systems for encoding
transmissions over the internet.  You should have EITHER PGP or S/MIME
checked, not both.

Unlike PGP, S/MIME requires you to obtain a certificate from a CA
(Certificating Authority) before you can encode messages.  The best
known of these is Thawte, but it is not the only CA by far.

PGP doesn't require the same sort of certification and IMO is easier
to use.

Why use S/MIME? Well, there are a number of programs out there that
support S/MIME but not PGP.  Using the S/MIME facility in TB means
that a message can be verified.

PGP has its own version of S/MIME called PGP/MIME.  At this time the
only program that can take advantage ofit is Eudora, so it is better
to leave this unchecked in the PGP tray options.


  Graham  mailto: [EMAIL PROTECTED]

   --

Written using The Bat! 1.46c

-BEGIN PGP SIGNATURE-
Version: PGP 6.5i
Comment: PGP 6.5.8 For verification of mail and internet security

iQA/AwUBOdGQ5S7i2PqZ2xC9EQIJRACgzYX5+QF3/XGfqOg74dOQFM5LRdIAoNI3
4dFGG1JGAgLMBHvN6zRTS7yH
=beMw
-END PGP SIGNATURE-



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

About PGP certificates

[Ameng]

Hello TBUDL!
  If I selected the Enable S/MIME at Account-Properties,
then will appear a warning message when i send a signed mail.
The warning message as follow:

"No signing certificate for [EMAIL PROTECTED]"
and
"No valid signing certificates. Cannot sign the message using S/MIME"

Who can tell me why and how to send a signed mail with S/MIME?
What's the meaning of S/MIME?

-- 
Best regards!
  Ameng  



-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re: About PGP certificates

[A . Curtis Martin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 27 Sep 2000 11:11:29 +0800, Ameng wrote:

A - The editor uses something called 'free caret', which basically
A means that when you move your cursor down from a text line to an
A empty line, it keeps it position on the horizontal axis. In other
A words, it doesn't move to the beginning of the empty line but stays
A somewhere in the middle. Took me quite some time to get used to it,
A but now I hardly notice anymore. (This 'feature' will probably become
   
   :- Was that put in just for the Eudora fans? ;-b You seemed so
   upset with it initially.

Your little synopsis was very good.

The main features for me that makes it stand out are:

1) It's method of handling multiple accounts.

2) Templates

3) Templates

4) Templates

5) It's advanced filtering.

6) It's editor  in terms of the methodology and the thinking behind
it. How it actually works can be a bit quirky and needs some
acclimatization. :-)

If one were to rip out the template support in TB!, I could easily be
using PMMail or Pegasus at present.

- --
A. Curtis Martin..
Moderator TBUDL/TBBETA  |  PGP Key ID: 0xEE079937
PGP Key: mailto:[EMAIL PROTECTED]?Subject=SendAlliePGPKey
- ---
** "I am functioning within established parameters. "

Using TB! v1.46d «» Win2k Pro SP1

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Digitally signed for message and sender verification.

iQA/AwUBOdGNuPAXeSHuB5k3EQLWMwCdGTeZoHL8QI9BTfOv89aJcV1CqEEAniwl
Nmb8PyP9SsnUZb+0dBOYoeUs
=/ohi
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re: s/mime and certificates

[Gerd Ewald]

Hi Patrick,

on Tue, 1 Aug 2000 16:45:22 +0200 GMT
your local time, which was 01.08.2000, 16:45:22 (GMT+0200) my local time,
you wrote about "s/mime and certificates":

PE i have my own certificate but i'm not able to import it btw..

I would like to forward part of a message I sent earlier to this list. Maybe the
mentioned URL is a good start for you.

++BEGIN FORWARDED MESSAGE+
snip

Nevertheless after installing TB! 1.45 S/MIME you need to implement so-called
certificates. Good explanation for downloading and implementation of
certificates is http://www.mindquake.com.br/thebat/. To download a certificate
of my trustcenter (WEB.DE) goto http://trust.web.de/root.sql.

snip
++END FORWARDED MESSAGE+++

HTH

-- 
Best regards,
 Gerd

Using The Bat! 1.45 S/MIME
under Windows 98 4.10 Build   A 

 S/MIME Cryptographic Signature

Re[2]: s/mime and certificates

[Patrick Erler]

hallo Gerd!

on Wednesday, August 02, 2000, 10:15:18 AM, you wrote:

GE Hi Patrick,

GE on Tue, 1 Aug 2000 16:45:22 +0200 GMT
GE your local time, which was 01.08.2000, 16:45:22 (GMT+0200) my local time,
GE you wrote about "s/mime and certificates":

PE i have my own certificate but i'm not able to import it btw..

GE I would like to forward part of a message I sent earlier to this list. Maybe the
GE mentioned URL is a good start for you.

GE ++BEGIN FORWARDED MESSAGE+
GE snip

GE Nevertheless after installing TB! 1.45 S/MIME you need to implement so-called
GE certificates. Good explanation for downloading and implementation of
GE certificates is http://www.mindquake.com.br/thebat/. To download a certificate
GE of my trustcenter (WEB.DE) goto http://trust.web.de/root.sql.

GE snip
GE ++END FORWARDED MESSAGE+++

GE HTH


alles klar.. :) the problem with the S/MIME certificates is that they
are browser dependent.. thats not acceptable for me because i use that
lot of browsers as a webdesigner that permanently exporting and
importing of certificates is way to much trouble.. so i will stay with
PGP as it looks...


PAT
--



vcard/LDAP/PGP: http://dresden-online.com/~perler/identity.html
PGP fingerprint: DAC6 2FDA 1ED7 AD55  BD1F 5142 3D5F 72BF

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re[3]: s/mime and certificates

[Gerd Ewald]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Patrick,

on Wed, 2 Aug 2000 10:45:58 +0200 GMT
your local time, which was 02.08.2000, 10:45:58 (GMT+0200) my local time,
you wrote about "s/mime and certificates":

PE the problem with the S/MIME certificates is that they
PE are browser dependent.. thats not acceptable for me because i use that
PE lot of browsers as a webdesigner that permanently exporting and
PE importing of certificates is way to much trouble.. so i will stay with
PE PGP as it looks...

Mmmmh... I don't think S/MIME certificates are browser dependant. AFAIK the way
d/ling them is browser dependant. Once you have your certificate and that one of
your trustcenter you can import these into TB! (you need your own adress in the
adress book and one or two adresses in Trusted Root CA and Intermediate CA to
import the trustcenter's certificate.

But you are right using PGP :-))

- --
Best regards,
 Gerd

Using The Bat! 1.45 S/MIME
under Windows 98 4.10 Build   A

-BEGIN PGP SIGNATURE-
Version: PGP 6.5i
Comment: Digitally signed for authentication purposes ! Gerd Ewald

iQA/AwUBOYfX2Uy/sHrVbGGHEQJSdgCgsvFctUDuIziV5elWgeC5ajz1r8AAn2RQ
CJs6UcsWvu7wjezBw8xSNz5M
=qBOu
-END PGP SIGNATURE-

 S/MIME Cryptographic Signature

Re[4]: s/mime and certificates

[Patrick Erler]

-BEGIN PGP SIGNED MESSAGE-

hallo Gerd!

on Wednesday, August 02, 2000, 11:11:58 AM, you wrote:

GE -BEGIN PGP SIGNED MESSAGE-
GE Hash: SHA1

GE Hi Patrick,

GE on Wed, 2 Aug 2000 10:45:58 +0200 GMT
GE your local time, which was 02.08.2000, 10:45:58 (GMT+0200) my local time,
GE you wrote about "s/mime and certificates":

PE the problem with the S/MIME certificates is that they
PE are browser dependent.. thats not acceptable for me because i use that
PE lot of browsers as a webdesigner that permanently exporting and
PE importing of certificates is way to much trouble.. so i will stay with
PE PGP as it looks...

GE Mmmmh... I don't think S/MIME certificates are browser dependant. AFAIK the way
GE d/ling them is browser dependant. Once you have your certificate and that one of
GE your trustcenter you can import these into TB! (you need your own adress in the
GE adress book and one or two adresses in Trusted Root CA and Intermediate CA to
GE import the trustcenter's certificate.
right... i just could not find mine and tried to reinstall it into ie
from the email i received when i got my certificate but they told me
that i now use another browser..

btw, your signature is "invalid" here (bat 1.46/b2)...

PAT
- --



vcard/LDAP/PGP: http://dresden-online.com/~perler/identity.html
PGP fingerprint: DAC6 2FDA 1ED7 AD55  BD1F 5142 3D5F 72BF

-BEGIN PGP SIGNATURE-
Version: PGP 6.5i

iQCVAwUBOYfdE28xdMM1MXPvAQHRaQQArPOdnEU0hYriiFEo4nNM/HCNxN/ZSzs+
4ZpjVB27vPJCivIzR2b9tGFhMnBF0jZRkVbhlG4kh7mxsyXPBzxtxwPoN+Vi41wP
8KqGvS4fzYD5a5sPOCrtutOO8QFJjUAA2bHuKv/4HFoT6dd3XKItNSkH3cHzWqRj
Idqvmcwi8ks=
=C9ga
-END PGP SIGNATURE-

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

Re: s/mime and certificates

[Marck D. Pearlstone]

Hi Gerd,

On 02 August 2000 at 11:11:58 GMT +0200 (which was 10:11 where I
live) [EMAIL PROTECTED] wrote and made these points on the subject
of "s/mime and certificates":

GE Once you have your certificate and that one of your trustcenter
GE you can import these into TB! (you need your own adress in the
GE adress book and one or two adresses in Trusted Root CA and
GE Intermediate CA to import the trustcenter's certificate.

Do you know that your WEB.DE certificate flags up as Invalid?

-- 
Cheers,
.\\arck

Marck D. Pearlstone, Consultant Software Engineer
Moderator TBUDL / TBBETA
www: http://www.silverstones.com
PGP key: mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY
*---
| Using The Bat! 1.46 Beta/2 S/N 14F4B4B2
| under Windows 98 4.10 Build 1998  
*---

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org

s/mime and certificates

[Patrick Erler]

hallo TBUDL!

could someone give a small introdction of handling certificates (the
new S/MIME ones introduced with 1.45) in the bat?

i see differences between 1.45 and 1.46 beta (certificates are handled
now by the os (w2k) as it seems..)

i have my own certificate but i'm not able to import it btw..


PAT
--


vcard/LDAP/PGP: http://dresden-online.com/~perler/identity.html
PGP fingerprint: DAC6 2FDA 1ED7 AD55  BD1F 5142 3D5F 72BF

-- 
--
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   mailto:[EMAIL PROTECTED]
To Unsubscribe from TBUDL, double click here and send the message:
   mailto:[EMAIL PROTECTED]
--

You are subscribed as : archive@jab.org