[Nfb-web] SSL Certificate

[Erik Burggraaf]

Hi Brian,

First, assertain why your clients are rejecting the certificate.  The 
dialog box that appears in your clients usually gives a reason.  Common 
reasons include:
The certificate was not issued by a trusted authority.  This would be the 
case if you generated your certificate directly through the nfb's hosting 
as would normally be the case for an nfb affiliate site.

The certificate is for a domain different from the one you are connecting 
to.  This might also be the case with an nfb issued certificate.  In that 
case, double check the domains, and you will see something like, you are 
trying to connect to www.nfbil.org, but the cert is issued from www.nfb.org.

The date is not valid.  Usually this means that there is a problem with a 
clock setting, but some times it indicates a rare problem with the cert.

The reason may be academic, but after all, this is how we learn.  Your 
certificate is almost certainly trustworthy, but you want to make sure.

Once you have made sure your cert is trustworthy, you'll want to tell your 
email clients to accept the cert as long as the parameter that triggered 
the error remains true.

In all cases, the security dialogs posted by your clients contain a button. 
 On a mac, this is usually a show more information button.  In outlook, I 
believe it's a show more details button.  It's been 10 years since I did 
more than experiment with windows, so I don't know the protocol for most 
modern windows clients.

When you press space bar on this button on a mac, you get several 
checkboxes.  One of these says something like "always trust this 
certificate".  Check the box, and press OK.

I'm sketchy on outlook, but as I recall, when you press space on the show 
more details button, a new dialog opens.  You can then tab to an install 
certificate button and press space on it.

You may have to google the procedure in case I got it wrong.  The only one 
I'm sure of is the mac mail one.  Google things like, "accept ssl 
certificate thunderbird", or "install ssl certificate in mail on IPhone".

I hope this helps,


Sent with AquaMail for Android
http://www.aqua-mail.com


On December 11, 2016 6:07:12 PM Brian Mackey via NFB-Web 
<nfb-web at nfbnet.org> wrote:

> Greetings to all,
>
>
>
> NFB Illinois recently acquired a SSL certificate for our email accounts.
> What needs to be done next so that when we open our email client (e.g.
> Outlook or Apple) so that we don't keep getting a message asking to install
> the certificate? Please let me and Pattie Chang know when you get a moment.
> Pattie is copied on this message.
>
>
>
> Thank you.
>
>
>
> Brian A. Mackey
>
> Brian A. Mackey
> Owner, Mackey Enterprises, LLC
> Treasurer & Webmaster, National Federation of the Blind of New Jersey
> 609-953-6988
>  <mailto:Bmackey88 at gmail.com> Bmackey88 at gmail.com
>  <http://www.mackeyenterprisesllc.com/> www.mackeyenterprisesllc.com
>
> "Happy are those who dream dreams and are willing to pay the price to make
> those dreams come true"
>       -Vince Papale
>
>
>
> _______________________________________________
> NFB-Web mailing list
> NFB-Web at nfbnet.org
> http://nfbnet.org/mailman/listinfo/nfb-web_nfbnet.org
> To unsubscribe, change your list options or get your account info for NFB-Web:
> http://nfbnet.org/mailman/options/nfb-web_nfbnet.org/burggraaferik%40gmail.com