Web Hosting Forum | Lunarpages
News: July 14, 2008 - New Contest! - Submit Your WordPress Theme Designs, Win BIG!
September 1, 2008 - Submit Your Web Site for the Sept 2008 Site of the Month!
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
September 07, 2008, 01:15:28 PM


Login with username, password and session length


Pages: [1] 2 3   Go Down
  Print  
Author Topic: SSL IMAP Security Warnings  (Read 8957 times)
taglio
Guest
« on: November 22, 2003, 07:21:07 AM »

Hi there –

I saw in another thread that LunarPages provide SSL connections for IMAP.

I just enabled SSL for IMAP in Outlook 2003 on the default port 993 and I get two identical security warnings upon connect:

“The server you are connected to is using a security certificate that could not be verified.  A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.  Do you want to continue using this server?”  If I answer “yes” I can read my IMAP mail.  If I choose “no” I cannot.

Any idea what’s up?

Best,

David Boles
Logged
taglio
Guest
« Reply #1 on: November 22, 2003, 10:00:56 AM »

Here is the solution from support and it works great!

Thanks, Hush!

***

SSL IMAP Security Warnings

Hello David,

The SSL we provide is a shared certificate on each of our servers, and is self assigned. Basically this means that they have not been assigned by a 'Trusted CA Root Provider'. It still gives you SSL secure transaction, however, you have to varify this.

If you were to use our login page from Lunar Pages (www.lunarpages.com/login.php), and use the 'secure' option to log into your CPanel, you would be presented with a similar option, but also with a 'View Certificate' option. This details our SSL cert. At the bottom of this screen is a button to 'Install Certificate'. Follow the onscreen prompts to install this cert to your machine, and you will no longer receive the request to allow use of this cert, as it will automatically approve when used on your computer.

[snip]

Regards,
Hush Lee
Logged
taglio
Guest
« Reply #2 on: November 22, 2003, 02:07:42 PM »

P.S.

If you aren't using the SECURE login for cPanel you don't know what you're missing!  Its base background is white.  Much easier to read than the dark background and dark blue of the regular, unsecure, control panel.  

Why, the secure edition is not only more aesthetically pleasing for the eye, its easier for the mind to interpret it as well!  Bwo-ho!

db
Logged
leighsww
* The Tough Love Cuddly One *
Berserker Poster
*****
Offline Offline

Posts: 13870


WWW
« Reply #3 on: November 22, 2003, 03:51:19 PM »

Thanks for sharing that with us, taglio.  Good info.
Logged
taglio
Guest
« Reply #4 on: November 22, 2003, 04:25:21 PM »

It looks like the regular cPanel page is white now, too!  Neat!  I don't remember "Service Status" option being there in the left gutter before, but I'm new here.

I wonder why the radio button for the login page defaults to a non-secure login?

Best,

db
Logged
Jwink3101
Über Jedi
*****
Offline Offline

Posts: 1838


The one and only.


« Reply #5 on: November 22, 2003, 09:16:51 PM »

is that certificate availible for IMAP with the lower plan?
Logged

-Justin Winokur


"The Music is reversible but time is not. Turn Back! Turn Back! Turn Back! Turn Back!" - Intentional backmasking in ELO's Fire On High.
Hush
Über Jedi
*****
Offline Offline

Posts: 2760



« Reply #6 on: November 22, 2003, 09:36:12 PM »

The Secure connection is available to all users when connecting to CPanel and Mail facilities on their account.  Personally I only ever use the secure links.

Also, thanks Taglio for dropping my name in there... Kinda gives a support desk jockey a warm fuzzy feeling Smile
Logged


<-Link Removed By Hush - Never To Reinstated->
taglio
Guest
« Reply #7 on: November 23, 2003, 05:26:59 AM »

Hey, you're that Hush!  Love the image icon you use here.

It's important to celebrate good work and mention those who do it by name.

Best,

db
Logged
Jwink3101
Über Jedi
*****
Offline Offline

Posts: 1838


The one and only.


« Reply #8 on: November 23, 2003, 05:34:32 AM »

How do you do it on Outlook Express? What about Eudora and Opera mail clinet?
Logged

-Justin Winokur


"The Music is reversible but time is not. Turn Back! Turn Back! Turn Back! Turn Back!" - Intentional backmasking in ELO's Fire On High.
taglio
Guest
« Reply #9 on: November 23, 2003, 05:52:40 AM »

I don't know Edudora, but setting it up with Outloook Express is easy.   Make sure you downloaded and installed the SSL certificate for the IMAP server as detailed here previously.

Delete your current email account.

Then create a whole new one choosing IMAP from the drop down list instead of POP3 when setting up the account type.  Your SMTP and OUTGOING servers for IMAP are the same as POP3.  Finish setting up your account.

THEN...

Go back to your account properties by selecting TOOLS|ACCOUNT from the Outlook Express text menu.  

Highlight your account.  

Click on the PROPERTIES button for the account.  

Go to the ADVANCED TAB and check the box that says your account requires a secure SSL connection.  

I use a different SSL server for SMTP than LunarPages.  I just tested the LunarPages SSL connection for POP3 sending and got the same error message about a missing security certificate!  Gah!  If Hush or anyone else can tell us where to find the SSL certificate for sending mail that would be great.

At least you can get going with IMAP SSL right now and the send mail SSL certificate instructions should be forthcoming...

Best,

db
Logged
Ed
Berserker Poster
*****
Offline Offline

Posts: 5205



WWW
« Reply #10 on: November 23, 2003, 06:09:26 AM »

Eudora has an option for SSL and other security methods. Once you create the account, goto the advanced options. I beleive it should be on the "checking mail" page.

- Ed
Logged

Jwink3101
Über Jedi
*****
Offline Offline

Posts: 1838


The one and only.


« Reply #11 on: November 23, 2003, 06:22:29 AM »

Taglio, i already use IMAP so do i have to resetup the account.
Logged

-Justin Winokur


"The Music is reversible but time is not. Turn Back! Turn Back! Turn Back! Turn Back!" - Intentional backmasking in ELO's Fire On High.
Jwink3101
Über Jedi
*****
Offline Offline

Posts: 1838


The one and only.


« Reply #12 on: November 23, 2003, 06:28:06 AM »

Also, can you do it with POP3
Logged

-Justin Winokur


"The Music is reversible but time is not. Turn Back! Turn Back! Turn Back! Turn Back!" - Intentional backmasking in ELO's Fire On High.
Hush
Über Jedi
*****
Offline Offline

Posts: 2760



« Reply #13 on: November 23, 2003, 07:33:19 AM »

Okay, the reason that you get a CN Name Error when using outgoing mail is because you are comparing mail.yourdomain.com to a cert that is named server.lunarpages.com.

In order to use POP3 with the SSL Cert, you need to change you POP3 setting to server.lunarpages.com  ie if your account is hosted on neptune you would type in neptune.lunarpages.com
Logged


<-Link Removed By Hush - Never To Reinstated->
taglio
Guest
« Reply #14 on: November 23, 2003, 07:46:52 AM »

Quote from: Hush
Okay, the reason that you get a CN Name Error when using outgoing mail is because you are comparing mail.yourdomain.com to a cert that is named server.lunarpages.com.

In order to use POP3 with the SSL Cert, you need to change you POP3 setting to server.lunarpages.com  ie if your account is hosted on neptune you would type in neptune.lunarpages.com


Hey, Hush, I use IMAP.  IMAP incoming SSL works.  Setting the SMTP server to use SSL with IMAP SSL does not work because I get another message telling me the security certificate is invalid and I am assuming it is for the SSL SMTP server because that's the only setting I changed when I got that new warning.  

Iny my test I set my SMTP server to danzig.lunarpages.com and chose to use the same authentification scheme as my incoming mail server - danzig.lunarpages.com.  Is there a certain place one must go to get that certificate or do POP3 SSL and IMAP SSL not get along in the same account profile?  

This isn't a big issue for me since I presently use POBOX.COM for secure SMTP (on port 26 or 25) but others here may be struggling...

Best,

db
Logged
Pages: [1] 2 3   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.3 | SMF © 2006-2007, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks


Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM