Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

SSL certificate for host different than domain

81 views
Skip to first unread message

Wawrzek

unread,
Nov 27, 2009, 8:19:46 PM11/27/09
to
Hi,

I use an e-mail account in a domain hosted on Dreamhost.com machines.

Every time I connect to the account I get:
"Certificate host check failed: certificate owner does not match
hostname mail.aviary.pl"

And later more details of account:
"This certificate belongs
to:
*.mail.dreamhost.com
[...]"

Finally the program asks if I accept the certificate. I confirm it
('a' for always). It adds the certificate to the certificate file, but
doesn't change anything. Next time I get the same question.

What should I do?

Cheers,
Wawrzek

Peter Vereshagin

unread,
Dec 24, 2009, 5:24:34 AM12/24/09
to
Oh Wawrzek want you buy me a mersedes benz?

Among the names those resolve to the same IP address as mail.aviary.pl, there must be a name that corresponds the certificate's wildcard, *.mail.dreamhost.com.
This name, with * replaced by subdomain's alpha-numeric name, should be the name of the server in your client's settings.
You should ask such a name at the hoster's support. Or, you may want get rid of SSL in your client.

2009/11/27 17:19:46 -0800 Wawrzek <waw...@gmail.com> => comp.mail.mutt:
W> I use an e-mail account in a domain hosted on Dreamhost.com machines.
W>
W> Every time I connect to the account I get:
W> "Certificate host check failed: certificate owner does not match
W> hostname mail.aviary.pl"
W>
W> And later more details of account:
W> "This certificate belongs
W> to:
W> *.mail.dreamhost.com
W> [...]"
W>
W> Finally the program asks if I accept the certificate. I confirm it
W> ('a' for always). It adds the certificate to the certificate file, but
W> doesn't change anything. Next time I get the same question.
W>
W> What should I do?

73! Peter pgp: A0E26627 (4A42 6841 2871 5EA7 52AB 12F8 0CE1 4AAC A0E2 6627)
--
http://vereshagin.org

0 new messages