www.ritlabs.com [Topic: Unknown CA certificate] http://www.ritlabs.com New posts in Unknown CA certificate of forum at www.ritlabs.com [www.ritlabs.com] en http://backend.userland.com/rss2 Fri, 18 Aug 2017 02:27:18 +0300 Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
I fixed this by changing my DNS. I was using these 91.239.100.100 and 89.233.43.71  I switched them (a few different ones) and it worked.  Laurentcliff's solution about deleting the files mentioned above did not work. It actually messed up my configuration (good thing I backed them up instead of deleting them - this is NOT a proper way to fix problems!) I did not try the other solution by Stewart Edgell. My problem was a bit intermittant, so I assume it might have been due to time delays with the DNS?  
18 August 2017 02:27:18, steve ripple.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message44683/ http://www.ritlabs.com/en/forums/forum4/topic814/message44683/ Fri, 18 Aug 2017 02:27:18 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
For solution, see post #3 (Jan Smoller):

https://www.ritlabs.com/en/forums/forum4/topic11441/
05 March 2017 16:33:09, Michel Thibodeau.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message44238/ http://www.ritlabs.com/en/forums/forum4/topic814/message44238/ Sun, 05 Mar 2017 16:33:09 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
re-bumping...Can someone translate the steps for obtaining the CA Certificate, root certificate, intermediate certificate, etc, and what does "CA" actualy mean?

I am really completely unfamiliar with any of this, all I know is that I can add an exception with every other client SW except TB...
01 August 2016 19:37:02, Bud Carlson.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message43547/ http://www.ritlabs.com/en/forums/forum4/topic814/message43547/ Mon, 01 Aug 2016 19:37:02 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Bumping this thread, this may sound stupid but how do you actually obtain the certificate that you need when you get this certificate mismatch error?  It's driving me buggy, I can't connect to 2 account via IMAP that our organization uses (hosted on GoDaddy) and GD support has no clue what I'm asking for
11 February 2016 20:26:14, Bud Carlson.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42988/ http://www.ritlabs.com/en/forums/forum4/topic814/message42988/ Thu, 11 Feb 2016 20:26:14 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
If you get the "Unsupported Certificate"-error with Gmail accounts:

There is another topic on that subject (see here). It occurs only with The_Bat versions older than v4.0.38. You can ask Ritlabs' support (see menu above) for which versions your license is valid. If that includes v4.0.38, you can upgrade to that for free and that will solve the problem.
05 August 2015 14:18:12, Daniel van Rooijen.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42380/ http://www.ritlabs.com/en/forums/forum4/topic814/message42380/ Wed, 05 Aug 2015 14:18:12 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Peter Schoutz: Its strange, I have never this problem but from 18.07.2015 I have this problem!

If I have delete

RootCA.ABD
IntermCA.ABD
tbuser.DEF

still annoying pop up window.

Please help.
05 August 2015 10:53:01, code2.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42379/ http://www.ritlabs.com/en/forums/forum4/topic814/message42379/ Wed, 05 Aug 2015 10:53:01 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Should be solved today by google mail Service
18 July 2015 15:45:36, Peter Schoutz.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42305/ http://www.ritlabs.com/en/forums/forum4/topic814/message42305/ Sat, 18 Jul 2015 15:45:36 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi,

you are not alone, same Problems here. GMX and other Provider works well with TLS, only Gmail sucks. Should be a problem by gmail.
17 July 2015 11:52:58, Peter Schoutz.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42297/ http://www.ritlabs.com/en/forums/forum4/topic814/message42297/ Fri, 17 Jul 2015 11:52:58 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hello,
got this message
!15/07/2015, 18:51:59: FETCH - TLS handshake failure. Unsupported certificate
Gmail POP3 account
How to fix it?
TB! 4.0.24 version

Thank in advance
15 July 2015 19:57:57, Bongano Stefini.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42287/ http://www.ritlabs.com/en/forums/forum4/topic814/message42287/ Wed, 15 Jul 2015 19:57:57 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi,

I just ran into this problem. I was able to solve half of the problem using Stuart's method. I don't get this error message, when I CONNECT to IMAP server, but it still pops up upon SENDING.
Any help appreciated!

Thanks: Balazs
22 June 2015 13:39:06, Balazs Nemeth.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message42220/ http://www.ritlabs.com/en/forums/forum4/topic814/message42220/ Mon, 22 Jun 2015 13:39:06 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Just add the correct 'AddTrust External CA Root' certificate.

Here is the link to download AddTrust External CA Root - UTN SGC.
Install this certificate and problem would be solved.
16 October 2014 11:40:18, Natalia Zhavoronkova.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message40774/ http://www.ritlabs.com/en/forums/forum4/topic814/message40774/ Thu, 16 Oct 2014 11:40:18 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
OMG I used to click on [OK] button for years, every 3 minutes!
It's all about getting certificate from a website of Issuer which is mentioned in the logs of your current hosting and install it to a new certificate contact (any name, and details).
21 October 2013 02:54:41, DoG.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message37832/ http://www.ritlabs.com/en/forums/forum4/topic814/message37832/ Mon, 21 Oct 2013 02:54:41 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
I had the same problem with a SSL secured IMAP account.
TheBat logs told me that my virus scanner failed on verifying the certificate (see below). So I decided to turn off virus check of e-mails sent through SSL. This solved the problem of TheBat's annoying pop-up.
Perhaps somebody may profit from this info.
====code==== 
>14.04.2013, 00:51:36: IMAP  - Issuer: generated by avast! antivirus for SSL scanning, avast! Mail Scanner, avast! Mail Scanner Root.
!14.04.2013, 00:51:36: IMAP  - TLS handshake failure. Invalid server certificate (The issuer of this certificate chain was not found).
 14.04.2013, 00:52:46: IMAP  - TLS handshake complete
=============
14 April 2013 03:28:11, Mike Syke.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message36725/ http://www.ritlabs.com/en/forums/forum4/topic814/message36725/ Sun, 14 Apr 2013 03:28:11 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
The only thing to be aware: deleting tbuser.def will reset all your customizations. It would be interesting to test whether or not you need to delete that file

If you have no customizations (shortcuts, toolbars etc) then it is no problem. I have several that would be a pain to recreate  :D
08 March 2013 17:07:41, Rick G.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message36453/ http://www.ritlabs.com/en/forums/forum4/topic814/message36453/ Fri, 08 Mar 2013 17:07:41 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
LaurentCliff's fix works - good one!

(I had the problem and was using Windows 8)
08 March 2013 13:11:44, John Drummond.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message36452/ http://www.ritlabs.com/en/forums/forum4/topic814/message36452/ Fri, 08 Mar 2013 13:11:44 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Another (easiest) method :

- close TheBat

- open your TheBat home directory (usually C:\Documents And Settings\<your_Windows_loginname>\Application Data\The Bat!)

- delete the files
RootCA.ABD
IntermCA.ABD
tbuser.DEF

- start TheBat.

The missing file will automatically be created again.
no certificate need.

worked for me.
15 April 2007 10:24:23, laurentcliff.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message17303/ http://www.ritlabs.com/en/forums/forum4/topic814/message17303/ Sun, 15 Apr 2007 10:24:23 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hey stewart you are a genius! You are my man!
I had stopped using The Bat because of this certicate error. After using your method the problem has been fixed. Many thx! I hope, we wont need to download this certificate to fix this problem on the newer version of The Bat.
23 March 2007 17:59:44, wadpro.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message17008/ http://www.ritlabs.com/en/forums/forum4/topic814/message17008/ Fri, 23 Mar 2007 17:59:44 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Thanks Stewart, that solved the problem (at least for me) :D
I still don't understand why it happened only after I restored my backup, but to be honest I don't really care about it now that it's working again.
Thanks again!
08 March 2007 15:55:29, happytulip.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message16743/ http://www.ritlabs.com/en/forums/forum4/topic814/message16743/ Thu, 08 Mar 2007 15:55:29 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Not a bug but definitely a nuisance! I had this problem when checking Gmail accounts. Resolved it as folows:

1. Check POP access is enabled for the Gmail user from Gmail controls (obvious but can be overlooked!).

2. Setup the Gmail account in the bat! using TLS on port 995.

3. When FETCH fails look to see the name of the issuer of the root certificate (currently Equifax Secure Certificate Authority).

4. Download the relevant certificate to hard disk:
https://www.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_­Certificate_Authority.cer

5. Import the certificate into the Gmail account using the Edit personal Certificates button on the General page of the Properties dialog.

6. View the certificate and Add to Trusted on the Certification Path page.

All done! :D  
08 March 2007 15:32:28, Stewart Edgell.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message16742/ http://www.ritlabs.com/en/forums/forum4/topic814/message16742/ Thu, 08 Mar 2007 15:32:28 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.

====quote====
wadpro writes:
I have the same problem after installing vista and importing backup data!
=============

Same here, and I'm pretty sure this is a bug. I switched computers (to Vista too) and after I did a fresh install I didn't get any error messages. But then I restored my backup... And while I'm still using exactly the same account information now I do get the "unknown CA certificate" dialog.  
05 March 2007 06:57:48, happytulip.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message16657/ http://www.ritlabs.com/en/forums/forum4/topic814/message16657/ Mon, 05 Mar 2007 06:57:48 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
I have the same problem after installing vista and importing backup data!
18 February 2007 16:10:18, wadpro.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message16416/ http://www.ritlabs.com/en/forums/forum4/topic814/message16416/ Sun, 18 Feb 2007 16:10:18 +0200 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
I'm having this problem again. Annoying pop-up that "The server didn't provide a root certificate during the session, and there is no corresponding root certificate in your address book".

I downloaded the Root Certificate from Issuer CA website and imported it into Trusted Root CA Address Book. It did not help this time :(

I think I know what the problem is. When I click on the properties of the entry (in Trusted Root CA Address Book), go to "Certificates Tab", click "View" certificate, it says:

The Bat can use this certificate for:
message encryption - no,
verifying digital signiture of a message - no,
TLS connections - no.

I need to make the Bat use this certificate for TLS connections. How can I do that?

Under "Certification path" there is a button "Add to Trusted" which is always grayed out.

10 September 2006 07:30:05, Alya.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message13722/ http://www.ritlabs.com/en/forums/forum4/topic814/message13722/ Sun, 10 Sep 2006 07:30:05 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi Giulia

I posted this error message, and after some time it was assigned as "not a bug"... So, what can I do??? Press the "Yes" all the time... Otherwise TB is the best e-mail client ever, I have tested several others, no alternative (if somebody knows an equallly good one, please let me know asap!!!)...
08 October 2005 08:17:08, Gabriella Egri.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message8177/ http://www.ritlabs.com/en/forums/forum4/topic814/message8177/ Sat, 08 Oct 2005 08:17:08 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi, I have the same problem as you all:

View Certificate and
Add to Trusted

disabled

And the certificate is already in Trusted ones because I'm talking about Gmail one.

So, the certificate is trusted, is in list, I can download email as well, but every time I have to say OK to that window to go on.

Any idea?

Thanks
08 October 2005 05:28:02, Giulia Ciappa.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message8174/ http://www.ritlabs.com/en/forums/forum4/topic814/message8174/ Sat, 08 Oct 2005 05:28:02 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Thanks a lot, Stephane.
But it does not help... The CA root certificate is sitting in the Address book (Trusted root), it is valid, everything seems OK as long as I do not try to send a message... Because then I just meet the "usual" message...  :cry:
Strange.
Might you please have a look at the certificates?
They are here:
http://www.ca.niif.hu/rootkey.htm
Should I download only one of them or all? Where can I input the fingerprint?

Is it easier to solve this problem with the newest TB! version?

Thanks a lot!
02 September 2005 13:37:46, Gabriella Egri.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message7560/ http://www.ritlabs.com/en/forums/forum4/topic814/message7560/ Fri, 02 Sep 2005 13:37:46 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
The certificate is probably valid but you simply don't have the root CA in your trusted root store.

TheBat is rather stubborn with that problem: you need to work around a bug in order to get the CA in the collection.

First, you need the root certificate and all intermediate certificates (if any).

Then, you need to work around an old bug in The Bat: In order to see the list of certificates, you need to go to the "options" menu and select the "S/MIME" entry. There, select "internal implementation". Validate and re-start the bat.

Now, open your Address book: you'll see two new folders: Intermediate CA and Trusted Root CA. You need to create a new contact for each intermediate and root CA certificate you have and, in the certificate tab, import the certs you got from your mail server.

Once you've done this, close the address book, change the S/MIME option back to CriptoAPI and restart the bat: it should now work properly.

One word of caution, though: getting a root CA from a third party is NOT something to do without carefull considerations. If your mail server is from your company, then it's probably ok. If it's from a third-party, you should go back to them and recommend them to invest in a real certificate.
02 September 2005 02:45:55, Stephane Grobety.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message7536/ http://www.ritlabs.com/en/forums/forum4/topic814/message7536/ Fri, 02 Sep 2005 02:45:55 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi

I have similar problem, except that my mail provider DOES have the root certificate, and I have imported it into The Bat!, plus I put it into the address bbok trusted root. Now when I go to Account/Properties/Personal Certificates/View it says "The certificate is valid". Still when I want to send a mail, I get the "The server didn't provide a root certificate during ... etc blah blah", the two buttons greyed, and when I say "YES, I want to continue" then the mail is sent.

Curiously, I see no possibility to input the fingerprint - although this might be the clue. In Pegasus mail I was ONLY prompted for the digital fingerprint, and then it was able to send my mails with  no problem.

Please help. I do not want to switch to Pegasus mail... Thanks!

Gabi
31 August 2005 06:18:44, Gabriella Egri.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message7508/ http://www.ritlabs.com/en/forums/forum4/topic814/message7508/ Wed, 31 Aug 2005 06:18:44 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
that's it - as the log said: "...server didn't provide a root certificate during the session..."

AFAIK often the root certificate is "chained" into the server certificate - this way you can easily check and add it to your base

if not, you have to manually get the root certificate of the Issuer (!) - so that line is particularly important...
27 June 2005 03:28:26, nlkes.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message6862/ http://www.ritlabs.com/en/forums/forum4/topic814/message6862/ Mon, 27 Jun 2005 03:28:26 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Marcin K. is right.

This problem occurs because TheBat needs digital certificate to decrypt the public key it receives from SSL/TLS server.

SSL/TLS session cannot be initiated unless public key is decrypted and digital signiture of the issuing Certificate Authority is verified. For that, there has to be the corresponding CA's certificate present in the address book. If it's a root certificate, it has to be in  the 'Trusted Root CA' address book, but sometimes you may need several certificates including intermediate ones (in 'Intermediate CA' address book) - if certificate chain or certification path is used.

So the proper way to deal with this problem is not to disable the warning window, but go to the CA's website and import proper certificates into address book. The account log will show which CA the TLS server's certificate is issued by.
24 June 2005 10:45:02, Alya.]]> http://www.ritlabs.com/en/forums/forum4/topic814/message6823/ http://www.ritlabs.com/en/forums/forum4/topic814/message6823/ Fri, 24 Jun 2005 10:45:02 +0300 The Bat! - Configuring the E-mail Client Unknown CA certificate Unknown CA certificate How to disable the "Unknown CA certificate window" in forum The Bat! - Configuring the E-mail Client.
Hi,

I had similar problem ... and I resolved it ... it looks simple: find RootCA of your e-mail server and import it to Trusted CA address book ...

I found in my account log:
>2005-05-20, 18:40:45: FETCH - Certificate S/N: 035E, algorithm: RSA (1024 bits), issued from 10 maj 2005 to 10 maj 2006, for 1 host(s): poczta.polsl.pl.
>2005-05-20, 18:40:45: FETCH - Owner: poczta.polsl.pl, Centrum Komputerowe, Politechnika Slaska, Gliwice, Slaskie, PL.
>2005-05-20, 18:40:45: FETCH - Issuer: PL, EuroPKI, EuroPKI Polish Certification Authority.
!2005-05-20, 18:40:45: FETCH - TLS handshake failure. Invalid server certificate (The issuer of this certificate chain was not found).

I found on my server (poczta.polsl.pl) info where to find CA files. Try to find appropriate files for your account/server.

I don't know why buttons are grayed, why TB! doesn't want to import certificates itself ... but as I remember Outlook doesn't do it too. They need to be imported to Windows base "by hand".

Marcin K.
20 May 2005 11:53:42, Marcin K..]]> http://www.ritlabs.com/en/forums/forum4/topic814/message5866/ http://www.ritlabs.com/en/forums/forum4/topic814/message5866/ Fri, 20 May 2005 11:53:42 +0300 The Bat! - Configuring the E-mail Client