Eudora and Avira: problems

[lucif...@opsss.com]

CHi every time I check my email, Avira opens some windows with these
writings:
The server's SSL certificate was rejected fir following reasons:
Certificate error: Unknown and unprovided root certificate. Do you
want to trust this certificate in future sessions?
I have disabled Scan Incoming Emails but I always get the same
problem: Can I solve it?
Thanks

[John H Meyers]

On 4/23/2012 3:07 PM:

It's Eudora giving that message, not Avira.

Choose "yes"

I see the same problem with people getting stuck at a "Stop" sign
on a local road -- drivers get as far as stopping,
but seem to have no inspiration to continue "going" again :)

--

[lucif...@opsss.com]

>It's Eudora giving that message, not Avira.

You are right.

>Choose "yes"

Always i choose yes.

>I see the same problem with people getting stuck at a "Stop" sign
>on a local road -- drivers get as far as stopping,

I have just noticed I have this problem only with katamail account.
Why please? Can I solve?
Thanks

[Han]

lucif...@opsss.com wrote in news:cbmdp7l8cl9e1b0u40m6meu5ne6624e38o@
4ax.com:

You probaly should ask katamail.

--
Best regards
Han
email address is invalid

[John H Meyers]

On 4/24/2012 11:50 AM:

>> It's Eudora giving that message, not Avira.
> You are right.

>> Choose "yes"
> Always i choose yes.

> I have just noticed I have this problem only with katamail account.
> Why please? Can I solve?

Eudora does not contain all the latest reliable vendor's
SSL "root certificates" (and some servers, like our campus internal server,
use self-signed certificates that we don't need to purchase from
any external vendor), but this isn't normally a problem because:

Once you accept any particular server's certificate (which adds it to
a personal collection of "trusted" certificates), there should be
no more repeat messages about the same server.

If not as suggested, what version of Eudora are you using?

Occasionally a vendor or ISP messes up their own installation of SSL
certificates into their own server, or allows them to expire, etc.,
but this should be causing everyone using alert email clients
the same problem (if only all clients were equally alert as is Eudora :)

If you want us to inspect what your katamail servers' certificates are,
please supply the exact names of both the incoming and outgoing servers
that you have specified to Eudora.

It happens to be possible for anyone to test any servers' SSL,
because establishing the connection and setting up SSL
occurs before login or authentication even begins,
so no one needs an actual account to simply test a server's SSL setup.

--

[lucif...@opsss.com]

>If you want us to inspect what your katamail servers' certificates are,
>please supply the exact names of both the incoming and outgoing servers
>that you have specified to Eudora.

I have done what you have just told me but the problem is the same.
The servres are: smtp.katamail.and compop.katamail.com

I have just known a friend of mne has the same problem from a little
time. Therefore I think this is Katamail server problem.

[John H Meyers]

On 4/25/2012 2:41 AM:

> Katamail's servers are: smtp.katamail.com and pop.katamail.com

Both Incoming and Outgoing SSL should be set to "If available, StartTLS"
and the "Use 587" box for outgoing mail should not be marked,
thus using port 110 for incoming and port 25 for outgoing.

I have SSL connecting fine using Eudora 7.1,
after marking each "Aruba, IT" certificate
(signed by "Actalis Server Authentication CA")
as "Trusted" in Eudora's "Certificate Information Manager"

The problem was precipitated by those certificates having expired
on April 23 2012 (two days ago), but when even those expired certificates
are "added to Trusted" in Eudora, the SSL session proceeds anyway.

It is likely that the server owner will soon become aware
that they have allowed their SSL certificates to expire,
which affects most email clients, by virtue of customers (you?)
contacting them and informing them of this oversight,
which may wake them up to the need to buy and install
their renewal certificates ASAP :)

If you don't want to fuss around with Eudora's
Certificate Information Manager to add certificates
having "skull and crossbones" icons to "Trusted,"
you may instead just change each server's SSL setting
to "Never." which will also work, although forgoing
the use of encrypted connections until you can use SSL again.

--

[John H Meyers]

On 4/25/2012 9:35 AM, John H Meyers wrote:

OP had said:
> Katamail's servers are: smtp.katamail.com and pop.katamail.com

[and one or both of those have just-expired SSL certificates]

We noted that you can simply stop using SSL
until the ISP finishes installing updated SSL certificates,
or you can use Eudora's "Certificate Information Manager"
to add the "bad" certificates to "Trusted" certificates
(which in this case would be necessary, because merely
clicking "Yes" only approves one of the "intermediate"
certificates which "signed" the actual servers' certificates,
still leaving the latter without being marked as trusted).

You can find the complete instructions for doing this
on pages 30-31 of this very fine Eudora manual:
<http://www.eudora.com/download/eudora/windows/7.1/Eudora_71_User_Manual.pdf>

I've seen various users of "Eudora OSE" (which is actually Thunderbird)
complain that there is no manual for it, just as there is no manual
for Thunderbird, yet ironically, not all users of classic Eudora ever
take advantage of the fact that original Eudora has a very "fine manual" itself,
apparently only fully appreciated when we don't have one for Thunderbird ;-)

--

[lucif...@opsss.com]

>having "skull and crossbones" icons to "Trusted,"
>you may instead just change each server's SSL setting
>to "Never." which will also work, although forgoing
>the use of encrypted connections until you can use SSL again.

Thanks for your advice. Now Eudora works fine.