On 01/11/2015 05:02 AM, Richard Falken wrote:
> WaltS48 wrote:
>> news.mozilla.org Connection security setting should be None, and use port 
>> 119.
> 
> Does that mean news.mozilla.org does not support SSL or TLS?
> 
> I was already connecting to those servers with no encryption at all. It is
> just that I find my unability to use encryption with servers that are
> supposed to provide it... weird.
> 
> I have tested some of those services with openssl s_client, and it gives
> certificate error (some related to self-signing, some to expired certs). I
> wonder is seamonkey just silently fails when an invalid certificate is
> presented to it. If that is the case, I would call that a bug.
> 

SeaMonkey doesn't fail silently when connecting to Eternal-September -
you should be getting the following message:

"Peer's Certificate issuer is not recognized."

unless you've imported the root ca. See:

1. <http://www.eternal-september.org/index.php?showpage=techinfo> see
the "2014-04-13 00:00:00 New SSL certificates for HTTPS and NNTPS" info
in the box.

2.
<http://wiki.cacert.org/FAQ/ImportRootCert?action=show&redirect=ImportRootCert>

3.
<http://wiki.cacert.org/FAQ/BrowserClients?action=show&redirect=BrowserClients>

4. <http://www.cacert.org/index.php?id=3>

Once you've imported & accepted the cacert PKI key you should have no
problem connecting to news.eternal-september.org s/ssl.
Port : 563 (encrypted connection NNTPS)
Port : 443 (encrypted connection NNTPS)
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to