Subject: Re: SSL problems with pc-pine

From: Ken Teh <[email-masked]>
Date: Wed, 7 Feb 2001 09:10:49 -0600 (CST)

On Wed, 7 Feb 2001, John Saylor wrote:

> Hi
>
> I'm trying to make a connection to an IMAPS server and pc-pine keeps
> complaining about unknown certificate authority. How can I make it aware
> of a given CA?
>
> I'm running under win2k pro and connection to a courier imap server if
> that helps.
>
> --
> \js [under duress with outhouse express]
>

I have the same problem with pine 4.30 on Unix.  I learnt that from an SSL
mailing list that Pine (at least 4.30) does not do validation correctly.
So, even though I have my CA's key and have included it in my pem file, it
still fails.

Luckily, I came across in the Pine documentation that you can turn off
certificate validation and that's how I have it running at the moment.

If anyone knows more about this, I'd like to hear it.

Ken

---

From: John Saylor <[email-masked]>
Date: Wed, 7 Feb 2001 10:35:13 -0500

Hi
----- Original Message -----
From: "Ken Teh" <[email-masked]>
Sent: Wednesday, February 07, 2001 10:06
Subject: Re: SSL problems with pc-pine

> So, even though I have my CA's key and have included it in my pem
file, it

What's the pem file?
$PINERC/certificates.pem

> certificate validation and that's how I have it running at the moment.

How do you turn off certificate validation? Can I do it on PC-Pine?

---

From: Scott Leibrand <[email-masked]>
Date: Wed, 7 Feb 2001 10:07:08 -0800 (PST)

> How do you turn off certificate validation? Can I do it on PC-Pine?

Add the /novalidate-cert flag to the hostname after the /ssl flag.

There's been some good discussion on this recently in comp.mail.pine.
Check out
http://x74.deja.com/[ST_rn=ps]/threadmsg_ct.xp?AN=724951090.1&mhitnum=5&CONTEXT=981568874.226230320

-- 
Scott Leibrand
[email-masked]            (Yes, that is a valid address.)
http://students.washington.edu/leibrand
* Opinions expressed are mine.  Everyone else can get their own.   :)   *
* RCW 19.190 notice: This email address is located in Washington State. *
* Unsolicited commercial email may be billed $500 per message.          *