On Wed, Oct 10, 2012 at 11:46 AM, Veljko <velj...@gmail.com> wrote:
> On Wed, Oct 10, 2012 at 09:46:13AM +0200, Oswald Buddenhagen wrote:
>> On Mon, Oct 08, 2012 at 06:06:52PM +0200, Veljko wrote:
>> > Is there way to tell mbsync to accept certificate from now
>> > on and ask only once?
>> >
>> the way to do that is to use get-cert to download the certificate (or
>> just store it manually in an appropriate place in an openssl compatible
>> format) and tell isync to use it via CertificateFile. i have
>> ~/.mbsync.<company>.crt, for example.
>
> Hi Oswald and thanks for your response!
>
> I already downloaded it with openssl and used CertificateFile in
> .mbsyncrc but it still warns me:
> Error, can't verify certificate: unable to get local issuer certificate
> (20)
>
> *** WARNING *** There is no way to verify this certificate. It is
> possible that a hostile attacker has replaced the
> server certificate. Continue at your own risk!
>
> Now I used get-cert and they are identical and problem still exists.
> I put CertificateFile in IMAPAccount section below UseIMAPS directive.
>
> What could be the problem?
>
> Regards,
> Veljko
If I remember correctly the certificate you should put in there is
not the certificate of the IMAPS server, but the certificate of the CA
that signed the IMAPS server's certificate.
In case of self signed certificates it should work without that
warning. (Thus it seems that you've put the server's certificate and
not the selfsigned or the CA's one.)
Ciprian.
P.S.: This is how I remember things from my previous
experiments... It's not a definitive answer.
------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel
