invalid certificate
yianniotis
I receive the following message, and I don't know if I should consider
it a fault and if Thunderbird is doing something wrong (I think not).
"An error occurred during a connection to pop3.live.com:995.
You have received an invalid certificate. Please contact the server
administrator or email correspondent and give them the following
information:
Your certificate contains the same serial number as another certificate
issued by the certificate authority. Please get a new certificate
containing a unique serial number.
(Error code: sec_error_reused_issuer_and_serial)"
I see a number of certificate related settings on Thunderbird, but I
have no clue what´s their use. Any suggestions are most welcome.
Thanks You !
--
ANDREAS
* English - detected
* English
* Greek
* German
* English
* Greek
* German
<javascript:void(0);>
Christian Riechers
>
> I receive the following message, and I don't know if I should consider
> it a fault and if Thunderbird is doing something wrong (I think not).
>
> "An error occurred during a connection to pop3.live.com:995.
>
> You have received an invalid certificate. Please contact the server
> administrator or email correspondent and give them the following
> information:
>
> Your certificate contains the same serial number as another certificate
> issued by the certificate authority. Please get a new certificate
> containing a unique serial number.
>
> (Error code: sec_error_reused_issuer_and_serial)"
>
> I see a number of certificate related settings on Thunderbird, but I
> have no clue what�s their use. Any suggestions are most welcome.
>
> Thanks You !
>
Contact your email provider. The problem lies there.
--
Christian
Brian Potter
I experienced the same issue this morning after updating to
Thunderbird's most recent update (7.0.1)
The issue is the security settings for your POP Incoming and SMTP
Outgoing security settings. I discovered that all incoming and
outgoing server settings should be set to 'None'. I have several
email accounts and in some cases, the Security Settings was set to
'STARTTLS if Available'. In Thunderbird, Go to Tools > Account
Settings > Server Settings > Security Settings > Connection security:
None.
Christian Riechers
That is a workaround at best, but not a solution. Disabling SSL means
passwords are sent in clear text. Do it at your own risk.
Again, the problem is with the provider, only Microsoft can fix this.
--
Christian
white...@fastmail.us
info) and reading the responses here, I called tech support at my ISP.
They told me that they had gotten a new (or new version) of their email
server software and that they had started getting calls about this from
others shortly thereafter. So perhaps this is the general problem?
Greywolf
> After experiencing and posting about the same sort of error (with less
> info) and reading the responses here, I called tech support at my ISP.
> They told me that they had gotten a new (or new version) of their email
> server software and that they had started getting calls about this from
> others shortly thereafter. So perhaps this is the general problem?
Wolf K.
Malcolm
waking up. Attempt to send a second time, it works. Weird.
Krastyo Komsalov
Here is what I found; the solution seems logical and worked for me.
Go to -> Thunderbird -> Account Settings -> Security “of any account
you have” -> View Certificates -> Others tab.
In “Others” tab you will find a expired certificate for “pop3.live.com:
995”.
Delete it – it is anyway expired.
I hope this helps.
I found there also expired certificate of Sympatico.
Seems “Others” act like garbage collector for expired certificates.
What have to happen with expired certificates is complicated question,
and seems thunderbird left it to the user. Certainly, some may be
deleted, others like my old personal certificates can’t “or I will not
be able to decrypt some old mails”.
Thunderbird is working well, keeping track which certificate to use
when there is consequent expired personal certificates.
Christian Riechers
> Hi,
>
> Here is what I found; the solution seems logical and worked for me.
>
> Go to -> Thunderbird -> Account Settings -> Security “of any account
> you have” -> View Certificates -> Others tab.
> In “Others” tab you will find a expired certificate for “pop3.live.com:
> 995”.
> Delete it – it is anyway expired.
> I hope this helps.
won't use an expired certificate anyway.
>
> I found there also expired certificate of Sympatico.
> Seems “Others” act like garbage collector for expired certificates.
> What have to happen with expired certificates is complicated question,
> and seems thunderbird left it to the user. Certainly, some may be
> deleted, others like my old personal certificates can’t “or I will not
> be able to decrypt some old mails”.
> Thunderbird is working well, keeping track which certificate to use
> when there is consequent expired personal certificates.
>
key, to which others have encrypted their messages sent to you. By
deleting that cert you'd essentially delete your public key used for
encryption.
--
Christian
Krastyo Komsalov
<chriech...@netscape.net.invalid> wrote:
> On 10/09/2011 06:27 PM, Krastyo Komsalov wrote:
>
> > Hi,
>
> > Here is what I found; the solution seems logical and worked for me.
>
> > Go to -> Thunderbird -> Account Settings -> Security “of any account
> > you have” -> View Certificates -> Others tab.
> > In “Others” tab you will find a expired certificate for “pop3.live.com:> 995”.
> > Delete it – it is anyway expired.
> > I hope this helps.
>
> Even though it's safe to delete it, it won't make any difference. TB
> won't use an expired certificate anyway.
>
It has to use CN = debug-pop3.live.com which is in"Servers" tab
and is for server pop3.live.com:995 as it shows in column "Server,
and ignore expired certificate in "Others" tab
Most of the time it work, but surprisingly it give the error time to
time.
There is at least 2 explanations:
1. There is bug in the Thunderbird - I am not ready to believe it 100%
Only argument for this is that the problem disappear after deleting
the expired certificate
2. As pop3.live.com, is not one server but a cluster;
If one of the members did not got his certificate updated
we will see this error when we randomly fall on it.
In this case, it is only coincidence that the problem
disappear after deleting the expired certificate.
The only argument against this is that the
valid certificate was issued from (4/28/2011 19:00:14 PM GMT),
but the problem started only week or two ago.
Of course the certificate does not got installed on the servers
at the moment it was issued.
What is in support of this explanation is that
seems each 2-3 years when this problem shows up
it is around the time of the certificate renewal - but it may be
coincidence too :-)))
Fairly 2 sounds better for me :-))
>
>
> > I found there also expired certificate of Sympatico.
> > Seems “Others” act like garbage collector for expired certificates.
> > What have to happen with expired certificates is complicated question,
> > and seems thunderbird left it to the user. Certainly, some may be
> > deleted, others like my old personal certificates can’t “or I will not
> > be able to decrypt some old mails”.
> > Thunderbird is working well, keeping track which certificate to use
> > when there is consequent expired personal certificates.
>
> In case of a personal certificate used for email, this is your public
> key, to which others have encrypted their messages sent to you. By
> deleting that cert you'd essentially delete your public key used for
> encryption.
Yes, you are right again. Probably i am not the only one
who has to but, hate to keep track of old certificates.
I did not want to get in details :-)).
>
> --
> Christian