[Nfb-web] SSL Certificate

[Littlefield, Tyler]

Hello,
To echo what has already been said I'll add a bit more.
Whether or not you can add ssl depends greatly on where you're hosted
and what you're using for email. Many providers such as dreamhost simply
don't let you swap in your own SSL certificate while some do.
If you now have a valid signed certificate, you can move forward
depending on who and where you're hosted.
If you don't have a lot of people accessing your site (it's just for an
affiliate), it might make more sense to just tell them to accept the
certificate and permanently store it. What really matters is that
there's an SSL connection, but only do so after following Eric's advice
and determining why you're getting that error.
Thanks,

On 12/11/2016 7:27 PM, Erik Burggraaf via NFB-Web wrote:
> Hi Brian,
> 
> First, assertain why your clients are rejecting the certificate.  The
> dialog box that appears in your clients usually gives a reason.  Common
> reasons include:
> The certificate was not issued by a trusted authority.  This would be
> the case if you generated your certificate directly through the nfb's
> hosting as would normally be the case for an nfb affiliate site.
> 
> The certificate is for a domain different from the one you are
> connecting to.  This might also be the case with an nfb issued
> certificate.  In that case, double check the domains, and you will see
> something like, you are trying to connect to www.nfbil.org, but the cert
> is issued from www.nfb.org.
> 
> The date is not valid.  Usually this means that there is a problem with
> a clock setting, but some times it indicates a rare problem with the cert.
> 
> The reason may be academic, but after all, this is how we learn.  Your
> certificate is almost certainly trustworthy, but you want to make sure.
> 
> Once you have made sure your cert is trustworthy, you'll want to tell
> your email clients to accept the cert as long as the parameter that
> triggered the error remains true.
> 
> In all cases, the security dialogs posted by your clients contain a
> button. On a mac, this is usually a show more information button.  In
> outlook, I believe it's a show more details button.  It's been 10 years
> since I did more than experiment with windows, so I don't know the
> protocol for most modern windows clients.
> 
> When you press space bar on this button on a mac, you get several
> checkboxes.  One of these says something like "always trust this
> certificate".  Check the box, and press OK.
> 
> I'm sketchy on outlook, but as I recall, when you press space on the
> show more details button, a new dialog opens.  You can then tab to an
> install certificate button and press space on it.
> 
> You may have to google the procedure in case I got it wrong.  The only
> one I'm sure of is the mac mail one.  Google things like, "accept ssl
> certificate thunderbird", or "install ssl certificate in mail on IPhone".
> 
> I hope this helps,
> 
> 
> Sent with AquaMail for Android
> http://www.aqua-mail.com
> 
> 
> On December 11, 2016 6:07:12 PM Brian Mackey via NFB-Web
> <nfb-web at nfbnet.org> wrote:
> 
>> Greetings to all,
>>
>>
>>
>> NFB Illinois recently acquired a SSL certificate for our email accounts.
>> What needs to be done next so that when we open our email client (e.g.
>> Outlook or Apple) so that we don't keep getting a message asking to
>> install
>> the certificate? Please let me and Pattie Chang know when you get a
>> moment.
>> Pattie is copied on this message.
>>
>>
>>
>> Thank you.
>>
>>
>>
>> Brian A. Mackey
>>
>> Brian A. Mackey
>> Owner, Mackey Enterprises, LLC
>> Treasurer & Webmaster, National Federation of the Blind of New Jersey
>> 609-953-6988
>>  <mailto:Bmackey88 at gmail.com> Bmackey88 at gmail.com
>>  <http://www.mackeyenterprisesllc.com/> www.mackeyenterprisesllc.com
>>
>> "Happy are those who dream dreams and are willing to pay the price to
>> make
>> those dreams come true"
>>       -Vince Papale
>>
>>
>>
>> _______________________________________________
>> NFB-Web mailing list
>> NFB-Web at nfbnet.org
>> http://nfbnet.org/mailman/listinfo/nfb-web_nfbnet.org
>> To unsubscribe, change your list options or get your account info for
>> NFB-Web:
>> http://nfbnet.org/mailman/options/nfb-web_nfbnet.org/burggraaferik%40gmail.com
>>
> 
> 
> 
> _______________________________________________
> NFB-Web mailing list
> NFB-Web at nfbnet.org
> http://nfbnet.org/mailman/listinfo/nfb-web_nfbnet.org
> To unsubscribe, change your list options or get your account info for
> NFB-Web:
> http://nfbnet.org/mailman/options/nfb-web_nfbnet.org/tyler%40tysdomain.com


-- 
Take care,
Ty
Twitter: @sorressean
Web: https://tysdomain.com
Pubkey: https://tysdomain.com/files/pubkey.asc