Comments on: Leopard Mail + Unsigned SSLs = Brick Wall

By: Tech Talk Point » Unverified Host – Apple Mail – Self-Signed Certificate Issues with Apple Mail and CPanel/WHM

Thu, 15 Apr 2010 10:28:27 +0000

[...] Apple Mail + Unsigned SSL’s = Brick Wall [...]

By: Dan Grebb

Dan Grebb — Mon, 01 Sep 2008 00:00:39 +0000

Hi All,

Just wanted to let any of you who have been having loads of trouble with this: I have found a solution that has solved ALL of my problems:

http://www.corewerkz.com/2008/08/26/how-to-fix-the-ssl-verify-certificate-issue-in-leopard-mail/#comment-409

Cheers!

By: brian cometa

brian cometa — Thu, 28 Aug 2008 17:34:35 +0000

SWEET! Glad I could help… interested if the solution works for ichat, i’m guessing it would.
Take Care,
Brian

By: Mike Llewellyn

Mike Llewellyn — Thu, 28 Aug 2008 10:07:02 +0000

Excellent! Thanks for that, worked for me!
Am now hoping to get iChat working in the same way if poss…

By: brian cometa

brian cometa — Tue, 26 Aug 2008 19:40:03 +0000

What’s up Mike, Chris, Jason, Dan, and Nick,
I finally found a solution. The problem is the certificate’s server name doesn’t match the server name in mail. OS X 10.5 will (intentionally) never save a certificate when these two things don’t match (regardless of “Always trust” checkbox). More info is on my blog where i wrote a little guide to fixing this problem (click my name above for direct link to article) or go to corewerkz.com and search for “verify certificate.”

By: Mike Llewellyn

Mike Llewellyn — Thu, 14 Aug 2008 11:14:21 +0000

Well yes… it is annoying of them though, it seems like a bug really as the user is given the choice to always trust it, and then the application ignores that… so you may be right, but it looks like a bug and feels like a bug… I think it is fair to call it a bug :)

By: Christopher Price

Christopher Price — Thu, 14 Aug 2008 10:50:25 +0000

Apple appears to be doing this by design. They seem to want to “encourage” everyone to get signed SSL certificates. I’m sure that the motivation is to enhance the security of the web, but for many it’s a needless expense… depending on the application, of course.

By: Mike Llewellyn

Mike Llewellyn — Thu, 14 Aug 2008 09:24:50 +0000

This is still happening for me (Leopard, automatic updates on, 10.5.4)… it seems to me this is a blatant defect that should have been addressed long ago… have I missed something?

By: Jason

Jason — Mon, 21 Jan 2008 15:55:43 +0000

Don’t bother switching to Thunderbird. It does the same thing and there doesn’t appear to be a work around. Not even a fake one like Mail offers (and doesn’t stick).

By: Nick

Nick — Tue, 18 Dec 2007 20:02:14 +0000

I’m having this exact same problem. Clicking the always trust doesn’t stick at all. I even tried resetting my Keychain because of a problem with Cyberduck. Nothing works. I’m so sick of putting in my password 100 times a day. I really wish Apple would address this more quickly. Mail is an every day irritation now when it used to work so smoothly with Tiger. I’m so frustrated that I’m thinking of switching to Thunderbird or something. I really used to love the Mail program. Now it’s become my tormentor.

To add insult to injury, I have about 10 e-mail accounts on the same server. The certificate works for some URLs but not for others. Same certificate. Same server.