Search  Rules  Login
TheBat English » The Bat! - Configuring the E-mail Client
Pages: 1
RSS
TLS handshake failure - Domain Mismatch, TLS handshake failure caused by domain mismatching
 
#1
0  
Hi,

I'm using TLS on IMAP and, although I've added the certificate to the trusted list, TB! is unable to connect to the server because "The server host name does not match the certificate.".

Some info and a log dump:

+ [machine1.myhost.com] is the machine my host uses for the shared certificate.

+ [mail.mydomain.net] is the address to may mail server hosted by my host.

+ the log dump:

Code
06-06-2005, 02:26:38: IMAP - Initiating TLS handshake
06-06-2005, 02:26:38: IMAP - Certificate S/N: [snipped], algorithm: RSA (1024 bits), issued from 23 Mai 2005 to 23 Mai 2006, for 1 host(s): machine1.myhost.com.
06-06-2005, 02:26:38: IMAP - Owner: US, Unknown, Unknown, Unknown, Unknown, machine1.myhost.com, ssl.net.
06-06-2005, 02:26:38: IMAP - This certificate is self-issued.
06-06-2005, 02:26:38: IMAP - TLS handshake failure. The server host name ("mail.mydomain.net") does not match the certificate.
06-06-2005, 02:26:38: IMAP - Could not connect to the server


When using Thunderbird I used the get a message alerting to this domain mismatch but could override it. Can it be done using TB!?

Thank you,
AD
 
 
 
#2
0  
We do not plan to let The Bat! connect to a host with mismatching certificate.
 
 
 
#3
0  
Any work arounds?
 
 
 
#4
0  
Yes, tell your ISP to use a certificate matching their domain.  
__________________________________
I'm just a user of The Bat! I don't work for Ritlabs.
 
 
 
#5
0  
It's actually mail.mydomain.com and the ssl cert is through myhost.com. It's not through my ISP.
 
 
 
#6
0  
As a workaround, you can modify the hosts file in the \WINDOWS\system32\drivers\etc\ directory.

Add the machine1.myhost.com (the address from the certificate) entry to the hosts file with the IP address from the mail.mydomain.net (the actual addres of your mail server) and in The Bat! configure machine1.myhost.com as the mail server.
 
 
 
#7
0  
> We do not plan to let The Bat! connect to a host with mismatching certificate.

Please, think about that. It is frequent issue, and users would be happy to have checkbox, which would allow them to receive email even if their ISP or admins does not make certificates right.

That will make life easier.
 
 
 
#8
0  
Thunderbird (is free email client) allows certificate exceptions.
 
 
 
Pages: 1