Claws mail and SSL certificates

bitlord bitlord0xff at gmail.com
Thu Jul 24 05:51:32 UTC 2014


On Thu, 2014-07-24 at 07:43 +0200, Anders Wegge Keller wrote:
>  When acessing my mail, news or whatever from Claws Mail, I invariably
> get at message, telling that the SSL certificate is unknown. However,
> connecting to the same server with 
> 
>  openssl s_client -connect rollo.jernurt.dk:993 -verify 5
> 
>  results in a complete verification of the certificate chain, ending
> with the root CA. The root ca is include in ca-certificates, so I
> would expect Claws to check there, rather than bothering me with
> accepting the same certificate over and over again. I cannot see any
> obvious way to tell claws where to look for root certificates, so I'm
> not sure if this is an intended (mis)feature, or it's a bug.
> 
> -- 
> /Wegge
> 
> Leder efter redundant peering af dk.*,linux.debian.*

Depends on the version of claws-mail and libetpan, >=claws-mail-3.10 and
compiled with >=libetpan-1.4 (or 1.4.1) is able to properly verify
certificate chain, previous versions don't. On f20 it works fine after
upgrade (claws-mail-3.10.1 is available, and libetpan-1.5 from updates
repo).



More information about the users mailing list