Re: smtp authentication fails

Thu, 6 Dec 2007 (10:50 -0800 UTC) Marc Greene wrote:

>> It may be necessary to manually download the certificate for Pine to
>> find in a local directory. It is also possible the certificate is
>> not correctly written, using something other than "lavabit.com". I
>> once suffered the problem until I realized the provided smtp-server
>> system setup info did not match the certificate. Pine needs specific
>> smtp-server name to validate - double check certificate! Is the
>> certificate created with a prefix domain name "xxxx.lavabit.com"
>> or something?
>
> I'm don't know where I would manually download the certificate, or
> where I should put it so pine can find it. I tried using mail.lavabit.com,
> and smtp.lavabit.com, but they just give me the same error.
>

Try this command if you have openssl installed:
openssl s_client -connect mail.lavabit.com:993 -CApath /Path/to/your/certs

You will find they have a certificate from GoDaddy.com with the 
following
subject=/O=*.lavabit.com/OU=Domain Control Validated/CN=*.lavabit.com
issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, 
Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure 
Certification Authority/serialNumber=07969287

So add this to your root CA directory
https://certificates.godaddy.com/repository/valicert_class2_root.crt

make a symbolic link to that file (inside your certs directory:
sudo ln -s valicert_class2_root.crt /System/Library/OpenSSL/certs/bcdd5959.0

I found the MD5 value (bcdd5959) with the following command
openssl x509 -hash -noout -in /System/Library/OpenSSL/certs/valicert_class2_root.crt

Then I tried the
openssl s_client -connect mail.lavabit.com:993 -CApath /System/Library/OpenSSL/certs
command again and received an OK verified code of 0.


-- 
Dr. Robert Delius Royar                   Associate Professor of English
Morehead State University                             Morehead, Kentucky

_______________________________________________
Pine-info mailing list
[email protected]
http://mailman1.u.washington.edu/mailman/listinfo/pine-info