4/30 In Outlook Express I get an error message everytime I check my
CSUA account, although I still get my mail. I am using POP port 995
with SSL. Is there a way I can prevent this message, it's annoying:
"The server you are connected to is using a security certificate that
could not be verified. A certificate chain processed, but terminated
in a root certificate which is not trusted by the trust provider. Do
you want to continue using this server?"
\_ asking Outlook question on csua motd is a bad idea. Any reason
why you want to use Outlook Express at first place?
\_ One (the?) reason to use Outlook as opposed to, say, Mozilla/
T-Bird is that it uses the XP MyStore as opposed to the Netscape
one which has problems with some certs (esp. personal certs with
non-exportable private keys.) I've just gone through this, and
while OpenSSL can deal with a lot of cert-related problems, it's
a bit tough for novice users to get the hang of. And if you're
dealing with multiple mail profiles, including Exchange/MAPI, it
has nicer calendaring/AD integration if you're lazy. -John
\_ We're talking about Outlook Express, not Outlook.
\_ CAPI/MyStore point holds, though. -John
\_ I use it because it's easy to use and comes with XP. Why is
it a bad idea to ask on the motd?
\_ because it's extremely virus prone. from the message, I
assume it's because csua uses a self-signed certificate.
there might be a security setting you can toggle to default
allow self-signed certificates. unfortunately I only know
how to do this on macs.
\_ Thanks for your help, by knowing CSUA uses self-signed
certificates I was able to find the answer on Google.
What you have to do is go to:
<DEAD>soda.csua.berkeley.edu:995<DEAD>
Then, when prompted, you can choose to "View the
Certificate" and import it. After that your Outlook
Express account won't prompt you anymore since it's
stored in the IE database. Hope this helps others.
\_ Thanks! 995 is the SSL POP port. FYI, I was trying to
do this with another mail server using SSL IMAP. I just
needed to browse to <DEAD>my-server:993<DEAD> in Internet
Explorer and do the same thing. (port 993 is the default
SSL IMAP port).
Don't use Mozilla/Thunderbird/Netscape e-mail, but I
imagine it's the same process but you need to import the
cert using a Mozilla-based browser.
\_ On the contrary, you don't need to deal with such
roundabout nonsense with those.
\_ I urge you give Mozilla Thunderbird a try. It is more intuitive
to use than Outlook Express, IMHO. Further, you are stuck with
the Outlook Express' file format. it's hard to do back up,
restoration, and etc... and it's virus-prone.
\_ For office use, I get huge attachments. Thunderbird needs to
support deleting attachments like Outlook does. Can't say
much for Outlook Express, though, since OE doesn't support it. |