FxOS: eMail app reports invalid server-certificate - impossible to configure mail-accs
I tried to configure 2 different mail accounts without success. in both cases it reports, that it can't establish a secure connection, because the server-certificate is invalid. one is my mail account from university and the other the account from a custom domain. in thunderbird all works well.
All Replies (7)
What kind of email you have? Gmail, Outlook, other? What kind of certificate?
as I said: "one is my mail account from university and the other the account from a custom domain."
I don't know what the matter with the server certificates is at university. And my private domain, hostet by a reasonable big provider, surely uses also valid certificates.
I don't use google or microsoft services for a reason and prefer for instance FxOS over their OS.
There should be an option to overrule the mailclients judgment, that the certificate isn't valid.
Right now FxOS prohibits many, many users from using mail on their phone!
More info on universities certifivates:
https://www.rz.uni-augsburg.de/service/zertifikate/wurzelzertifikate/
we really need to have the ability to import certificates.
do you want normal users to do that: http://www.pending.io/add-cacert-root-certificate-to-firefox-os/ to solve this?
by now lots of users are unable to use their mail!
I think your date and time of your phone is incorrect.so that invalid server message is comming
drummershob said
I think your date and time of your phone is incorrect.so that invalid server message is comming
how correct has it to be? I checked and at least year, month, day, hour and minute are correct ;-). I wonder, whether you really read my question!? already identified the problem: it's the unability to add certificates without diving into hacking meassures.
Modified by rivaldo
Certificate exceptions are a system-level issue that should be addressed outside the email app. Bug 867899 and bug 769183 are existing bugs that deal with the issue, although there may exist other bugs or other bugs may need to be filed.
If during the implementation of system support for certificate exceptions it's deemed appropriate (and not too risky) to provide a means for applications to help inform such a process, it is worth considering this during email app account setup informed by the ISP database.
The canonical statement on this can be found on comment 59.
A useful discussion thread can be found on the dev.platform list at https://groups.google.com/d/msg/mozilla.dev.platform/lT4Mhi-B1JI/KxrrfSq-G4YJ
Discussion of certificate exceptions are best suited to the dev-gaia list (https://www.mozilla.org/about/forums/#dev-gaia) or the dev-b2g list (https://www.mozilla.org/about/forums/#dev-b2g).
Currently available "workarounds" are to: - Get a valid certificate. StartCom provides free certificates for non-commercial use at https://www.startssl.com/?app=1 and certificates in general are quite cheap. (This actually addresses the problem so isn't really a workaround.) - Manually import a certificate from the command line: https://groups.google.com/forum/#!msg/mozilla.dev.b2g/B57slgVO3TU/G5TA-PiFI_EJ - Use the browser app to add a certificate exception. This should definitely work for ActiveSync, it may work for IMAP/SMTP/POP3 if the same certificate is hosted at the same domain name on the https port.