SSL Errors

[Amanda Hickman]

My mail provider (Dreamhost) recently changed their certificates[0] and since then I'm getting SSL errors when I test my IMAP connection:

Cannot connect to server. (java.lang.RuntimeException: error:0407006:rsa
routines: RSA_padding_check_PKCS1_type_1:block type is not 01 (SHA-1))

Dreamhost is fairly adamant that their certificates are good:

The new certificates have a trust chain up to the third-party CA, and each certificate in the chain uses the signature algorithm SHA-1 with RSA encryption.
http://www.sslshopper.com/ssl-checker.html#hostname=mail.velociraptor.info:993

I don't have any problem sending mail (SMTP over SSL on port 465), just fetching it. I don't have any trouble with the certificate on Thunderbird.

I saw a long thread on the bug tracker about the same error[1], which doesn't seem to be resolved. I'm looking for advice.


[0] http://www.dreamhoststatus.com/2013/05/09/secure-certificate-changes-coming-for-imap-and-pop-on-homiemail-sub4-and-homiemail-sub5-email-clusters-on-may-14th/
[1] https://groups.google.com/forum/#!msg/k-9-notifications/rW_Z9CXZYyQ/gRWqqjJV7McJ

[Bernhard Redl]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

maybe an android bug. What version do you use? Can you try k9 in an up
to date emulator? We just use the highlevel android ssl libraries.

> -- -- You received this message because you are subscribed to the
> K-9 Mail Users List. To post to this group, send email to
> k-9-...@googlegroups.com To unsubscribe, email
> k-9-mail+u...@googlegroups.com To report an issue with K-9
> Mail, visit http://code.google.com/p/k9mail/issues/list For more
> options, visit this group at
> http://groups.google.com/group/k-9-mail
>
> --- You received this message because you are subscribed to the
> Google Groups "K-9 Mail" group. To unsubscribe from this group and
> stop receiving emails from it, send an email to
> k-9-mail+u...@googlegroups.com. For more options, visit
> https://groups.google.com/groups/opt_out.
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.20 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlGdBLAACgkQ9wU+3S/MK7QTngCfQwl1JxpMl6AMsdhzeoPyd5cQ
KY8An3afTaxxBlu+QidG68+JVnT4bJCE
=obSN
-----END PGP SIGNATURE-----