Reply
Thread Tools
Posts: 175 | Thanked: 210 times | Joined on Mar 2013
#1
Hello.

I have a certificate problem with my e-mail account (imaps and smtps) on n900.
The certificate seems valid and I can connect without any problem from thunderbird, but on the n900 it appears a message that tells me "certificate unkown".

To troubleshoot this issue I used these commands to see if the certificate is valid:

Code:
openssl s_client -connect domain.net:465 | openssl x509 -text
Code:
openssl s_client -connect domain.net:993 | openssl x509 -text
and all seems all right, except the fact that the certificate became valid yesterday.

I would like to know if the n900 doesn't know that certificate because it is too recent and what is the official way to get it in n900 (I mean not me having to manually accept it).

N900 with CSSU Stable Version 21.2011.38-1Smaemo6.1

PS: BTW how can I remove a self-signed certificate if I already accepted it, where do I have to look to remove it?

Thanks.

Last edited by Malakai; 2013-12-14 at 16:47.
 
peterleinchen's Avatar
Posts: 4,117 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#2
Have a look here, afair some commands are speeled here ...
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 
Posts: 58 | Thanked: 134 times | Joined on Dec 2012 @ Vilnius, Lithuania
#3
This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7
 
Posts: 175 | Thanked: 210 times | Joined on Mar 2013
#4
I've tried to update n900 but it is already up to date, and I deleted all the accounts I had in modest and tried to reconfigure them with no success (still have the message with unknown certificate)

I was wondering: How the new certificates get in maemo, I mean that the certificate I need is new (released in 9th of December) so maybe that maemo just don't know it, and it should update the certificates database.

This bug report contains useful information. It might help you:

https://bugs.maemo.org/show_bug.cgi?id=9262#c7
I've read the bug report but I don't seem to understand everything:

After copying the files over so that:

$ md5sum /home/user/.modest/cache/*.db /etc/skel/.modest/cache/*.db|sort
a5ae49867124ac75f029a9a33af31bad /etc/skel/.modest/cache/cert8.db
a5ae49867124ac75f029a9a33af31bad /home/user/.modest/cache/cert8.db
dda6f3f2341531f22cc9f8b3ec251677 /etc/skel/.modest/cache/key3.db
dda6f3f2341531f22cc9f8b3ec251677 /home/user/.modest/cache/key3.db
f5ad0e29f7f56636638b84eb5fe5bb82 /etc/skel/.modest/cache/secmod.db
f5ad0e29f7f56636638b84eb5fe5bb82 /home/user/.modest/cache/secmod.db

and removing /home/user/.modest/cache/mail/.camel_certs/*, I can confirm that
both gmail and my personal accounts (server certificate signed by CAcert, root
certificate user-installed) work without certificate validation warnings.
What should I copy from where to where before removing /home/user/.modest/cache/mail/.camel_certs/*?
 
peterleinchen's Avatar
Posts: 4,117 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#5
Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO ). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute
Code:
~# cmcli -c common-ca -a downloaded.certificate.pem
cmcli --help tells you more ...

--
of course if it is a cert chain and the other certs are also newer you need to install them too.
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature

Last edited by peterleinchen; 2013-12-12 at 21:36.
 
Posts: 175 | Thanked: 210 times | Joined on Mar 2013
#6
Originally Posted by peterleinchen View Post
Okay, the required command was not mentioned where I expected it (but I do kow somewhere else on TMO ). So we go here:
you need to fetch the certificate in PEM format from issuer
and execute
Code:
~# cmcli -c common-ca -a downloaded.certificate.pem
cmcli --help tells you more ...

--
of course it is a cert chain and the other certs are also newer you need to install them too.
How do I download the certificate in PEM format? I don't have any experience with this as every time everything used to work out of the box.
 
peterleinchen's Avatar
Posts: 4,117 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#7
Look on your provider's web appearance, check internet and certificate authorities, use google.
Or just mail your provider and ask for the certificate(s).
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 
Posts: 175 | Thanked: 210 times | Joined on Mar 2013
#8
Solved. I accepted the certificate and now the connection is made without warning. Still I don't understand why that certificate wasn't in the n900 as it was valid.
 
pichlo's Avatar
Posts: 6,445 | Thanked: 20,981 times | Joined on Sep 2012 @ UK
#9
My host's certificate also wasn't included by default but Modest asked me the first time I connected to my IMAP account. I am surprised yours didn't.
 
Reply

Thread Tools

 
Forum Jump


All times are GMT. The time now is 17:42.