Certificate Problems

[suppersppy]

Version: 2008
Operating System: Mac OS X 10.5 (Leopard)
Processor: Intel
Email Client: Exchange

Both entourage and messenger act as if the certificate is not installed. First I added the X509 Keychain then I downloaded the certificate from the cert server and added it to the login keychain, X509 keychain, and system keychain. I made sure it is always trusted and I also added it into the Microsoft cert manager for good measure. I still get the certification error when I start entourage and messenger can not connect. I have no idea what to even try next.

 

[Corentin Cras-Méneur]

Both entourage and messenger act as if the certificate is not installed.

Which certificate?? A certificate for a specific server?? I'm surprised
you would need one for Messenger. Fairly uncommon...

First I added the X509 Keychain then I downloaded the certificate from
the cert server and added it to the login keychain, X509 keychain, and
system keychain. I made sure it is always trusted and I also added it
into the Microsoft cert manager for good measure.

In MacOS X 10.5, they have to go in the login keychain.
The cert manager is a front-end actually and through this app,
certifcats should end up in the keychain as well.

I still get the
certification error when I start entourage and messenger can not
connect. I have no idea what to even try next.

Is it a certificate for your e-mail server?? Are you sure you are
entering the root certificate and not another one for the same server (I
made that mistake in the past)??

Corentin

 

[suppersppy]

Which certificate??
I got the certificate by going to <http://[Name> of the Server which hosts your Certification
Authority]/certsrv and downloaded the certificate that was there.

I'm surprised you would need one for Messenger.
I get the error "Either date and time settings are incorrect, or the digital certificate file is not valid or installed on your computer". A quick search on google shows that I am far from the only person having this issue.

In MacOS X 10.5, they have to go in the login keychain.
The cert manager is a front-end actually and through this app, certifcats should end up in the keychain as well.
It is definitely installed in the login keychain.

Is it a certificate for your e-mail server?? Are you sure you are entering the root certificate and not another one for the same server (I made that mistake in the past)??
I went to the certification server and installed the oly thing that was there. I suppose it's possible that I am supposed to be getting something different but if so I don't know what it is or where to find it.

 

[suppersppy]

I don't if things need a bump in this forum but I still haven't figured this out.

 

[Corentin Cras-Méneur]

Which certificate??

I got the certificate by going to <http://[Name> of the Server which
hosts your Certification Authority]/certsrv and downloaded the
certificate that was there.

Well it might not be the root certificate. You need to ask your network
administrator for the root certificate.

I'm surprised you would need one for Messenger.

You only need it with corporate servers.

I get the error "Either date and time settings are incorrect, or the
digital certificate file is not valid or installed on your computer". A
quick search on google shows that I am far from the only person having
this issue.

Yeah, because a lot of people install the wrong certificate.

It is definitely
installed in the login keychain.
Good,


I went to the certification server and installed the oly thing that was
there. I suppose it's possible that I am supposed to be getting
something different but if so I don't know what it is or where to find
it.

You can analyze the certificate to figure out the address of the root
one, but it's a real pain.
The easiest way by far is to ask the network administrator,

Corentin

 

[suppersppy]

I can't ask the network administrator. They refuse to support me because I am on a mac. So lets assume it's the wrong certificate. How do I go about analyzing what I have.

 

[suppersppy]

You are correct. More digging leads me to find that it is a user certificate and not a root certificate. What now?

 

[Corentin Cras-Méneur]

You are correct. More digging leads me to find that it is a user
certificate and not a root certificate. What now?

Connect to OWA through Safari.
If you get a warning about the cert, then expand all the options in the
dialow and read carefully. In there, somwhere you will find the link you
need.

If you don't get a warning, then it means you have already asked Safari
to always approve the Cert for this site.
On the top right corner of the window in Safari, you have a little
padlock. Click it to display the certificate. Again, you can expand the
details there and look for the link to your root certificate.
The address to the certificate might end with .pem or .crt

Sometimes, the link doesn't work out of the box and you have to add an s
in http to connect through https to get to the root certificate.


Corentin

(I hate network admin who are incompetent enough not to provide the
required information and who just tell people they don't support Mac. It
really really really gets on my nerves),