Entourage 2004 won't collect TLS secure mail from Demon Internet (UK)

[hartley]

I am running Microsoft Entourage on Mac OS X 10.3.7 and have just
upgraded from Entourage X SR1 10.1.4 to Entourage 2004 SR 1 11.1.0
(040913). However Entourage 2004 seems to have a problem with using
TLS.

Demon Internet in the UK started offering TLS secure mail collection
over POP on Port 995 in Autumn 2004. This worked fine with my Microsoft
Entourage X on Mac, but when I upgraded to Entourage 2004, I get the
error:

Both Entourage X and 2004 refer to secure mail as SSL but I understand
this is a common error, TLS replaces SSL. However selecting the 'use
SSL to receive mail' worked for Demon's TLS service fine in Entourage X
(I turned off 'always use secure password' and left the port at the
default, 995).

In Entourage 2004 I get the following error when I press Send and
Receive:

"Unable to establish a secure connection to pop3.mail.demon.net because
the correct root certificate is not installed. If you continue, the
information you view and send will not be secure. Cancel/OK"

If I cancel I cannot pickup my mail, if I OK I can (so the problem is
not stopping me getting my mail) but it is a pain to remember to press
the OK after pressing send and receive each time.

Microsoft supplies instructions for installing root certificates and I
have found plenty of articles on the net about how to install
certificates and how to get Entourage working with Exchange servers.
However I don't have the certificate to install for Demon Internet.

Demon say: "Our TLS support is totally standard and should interwork
with any other correctly configured standard compliant product. I know
of no products that require a certificate to use TLS support with our
servers. We do not support Microsoft Office products on the Mac. TLS is
however compatible with the PC range of Microsoft Office products and
works fine. It does not require any additional certificates etc, with
the Windows platform. If Entourage 2004 requires such a certificate,
then details will have to come from the company that supplied the
product to you."

So Demon cannot/will not provide me with a certificate/where to find
one and Microsoft wants to charge me £49+VAT for phone support due to
the licensing programmme.

Is there anyone who can help?

 

[Paul Robichaux [MVP]]

I am running Microsoft Entourage on Mac OS X 10.3.7 and have just
upgraded from Entourage X SR1 10.1.4 to Entourage 2004 SR 1 11.1.0
(040913). However Entourage 2004 seems to have a problem with using
TLS.

Demon Internet in the UK started offering TLS secure mail collection
over POP on Port 995 in Autumn 2004. This worked fine with my Microsoft
Entourage X on Mac, but when I upgraded to Entourage 2004, I get the
error:

Both Entourage X and 2004 refer to secure mail as SSL but I understand
this is a common error, TLS replaces SSL. However selecting the 'use
SSL to receive mail' worked for Demon's TLS service fine in Entourage X
(I turned off 'always use secure password' and left the port at the
default, 995).

In Entourage 2004 I get the following error when I press Send and
Receive:

"Unable to establish a secure connection to pop3.mail.demon.net because
the correct root certificate is not installed. If you continue, the
information you view and send will not be secure. Cancel/OK"

If I cancel I cannot pickup my mail, if I OK I can (so the problem is
not stopping me getting my mail) but it is a pain to remember to press
the OK after pressing send and receive each time.

Microsoft supplies instructions for installing root certificates and I
have found plenty of articles on the net about how to install
certificates and how to get Entourage working with Exchange servers.
However I don't have the certificate to install for Demon Internet.

Demon say: "Our TLS support is totally standard and should interwork
with any other correctly configured standard compliant product. I know
of no products that require a certificate to use TLS support with our
servers. We do not support Microsoft Office products on the Mac. TLS is
however compatible with the PC range of Microsoft Office products and
works fine. It does not require any additional certificates etc, with
the Windows platform. If Entourage 2004 requires such a certificate,
then details will have to come from the company that supplied the
product to you."

So Demon cannot/will not provide me with a certificate/where to find
one and Microsoft wants to charge me £49+VAT for phone support due to
the licensing programmme.

Is there anyone who can help?

If you can find out from Demon who their root certificate authority is
(e.g. who issued their server certificate), you'll be golden. If I had
to guess, I'd guess that they're using GTE/Baltimore Cybertrust as their
root CA service, which means they may have bought their certificate from
Comodo or another similar outfit.

Cybertrust is the largest CA I know of whose root isn't included with
Mac OS X already. Try going to
http://www.instantssl.com/ssl-certificate-support/cert_installation/ and
installing that root cert to see if that fixes the problem. If not, get
Demon to tell you who their root is, then you should be able to find the
appropriate certificate.

Cheers,
-Paul

--
Paul Robichaux <[email protected]>
MVP - Exchange
Exchange security book: http://www.e2ksecurity.com
FAQs: http://www.swinc.com/resource/exchange.htm &
http://www.swinc.com/resource/e2kfaq.htm