On 10/5/09 12:33 PM, "Leonard Kaufman" <[email protected]> wrote:

> Console reports the following message each time my email accounts are
> accessed. Can you tell me what this means & what should I do to fix it?

This is a fix posted for Leopard:

User reports: After much frustration I finally have Entourage making an SSL
connection to an Exchange server in Mac OS X Leopard after performing the OS
Leopard installation from scratch.

All that is needed is your root certificate - no private key, no digital
identity

Now do the following:

1. Put the root certificate in your home folder.
2. Open a terminal.
3. Type the following:

sudo certtool i root_certificate.cer v
k=/System/Library/Keychains/X509Anchors
Obviously replacing "root_certificate.cer" with your certificate filename.

The last line of output should read "...certificate successfully imported."
If you get an error saying that the certificate is in the wrong format and
needs to be in PEM format, then use the Microsoft Cert Manager to convert
the certificate format by importing then exporting as PEM.

User explanation: Why did it break?

As it turns out, the X509Anchors file, as of Leopard, has been made obsolete
- but not entirely... It can (and is) still read from, but cannot be written
to - at least not with any GUI interface like Apple Keychain or Microsoft
Cert Manager.

As Entourage looks at this X509Anchors file for the Root Certificate and not
in the new SystemCA/RootCertificates.keychain files, of course it's not
going to find it! This also explains why people that upgraded rather than
fresh installed did not encounter this age old problem again.

-- 
Diane 




--
YouTalk mailing list
List address: [email protected]
List information: http://entourage.mvps.org/support_options/list.html
List moderator: [email protected], [email protected]
To unsubscribe: mailto:[email protected]?subject=unsubscribe

Reply via email to