Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Accept all certificates -SSL trouble?
  •  
McIrish

Messages: 236
Karma: 8
Send a private message to this user
We had to renew out SSL certificate with GeoTrust a couple months ago. I'm seeing a problem now and wondering if it is a problem with the certificate. We used a wildcard name for it so we could use the certificate in other places as well *.ourdomain.com is the host name. Android users now have to select "accept all certificates" when setting the SSL for their phones. That's fine, but with that setting, users are no longer able to open JPG attachments on their phones. I found a post from Google that claimed the "accept all certificates" setting can cause this problem. Unfortunately, the phones can't connnect to the server without that setting.

Any insight on this?
  •  
Brian (GFI/Kerio)

Messages: 744
Karma: 71
Send a private message to this user
You can use this tool to verify that your certificate is ok
https://www.sslshopper.com/ssl-checker.html
The common issue is that the certificate chain is broken because not all intermediate certificates are installed. Some browsers / devices have an issue and others do not. The resolution is to obtain the correct intermediate certificates from the CA, then use a text editor to assemble a combined certificate that you then re-import into Kerio Connect. There are some instructions in this KB article: http://kb.kerio.com/1132

[Updated on: Mon, 23 November 2015 18:13]


Brian Carmichael
Instructional Content Architect
  •  
McIrish

Messages: 236
Karma: 8
Send a private message to this user
Thanks Brian,
That cured the certificate problem. It took a bunch of guesses before I could figure out which of the inetrmediate certs from GeoTrust that had to be added. The fourth try was correct and all the cert checkers I ran came back correct.Our users don't have to use the "accept all certificates" function now.
Unfortunately, it didn't seem to cure the jpg problem. It's odd. The attachment is there but clicking on the paperclip icon does nothing. Maybe it's an android issue now.
  •  
Brian (GFI/Kerio)

Messages: 744
Karma: 71
Send a private message to this user
I'm glad it helped. You might need to restart the device, or possibly reconfigure the account.

Brian Carmichael
Instructional Content Architect
Previous Topic: Kerio Connect 8.5.3/9.0.0 + KOC + Office 2015 !
Next Topic: More Android 6.0 issues
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Sep 25 20:55:45 CEST 2017

Total time taken to generate the page: 0.00375 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.