[sylpheed:36920] Re: Cert expired again?

[Mike Hogg]

Hi Rich,
I don't see anything expired in the certificate though.  There are 3 certs in my chain.

The mail server is valid from 12/29/2019 to 12/29/2020
Its parent "Sectigo RSA Domain Validation Secure Server CA" is valid from 11/1/2018 to 12/31/2030
Its parent "Sectigo" issued to USERTrust RSA Cert Authority is valid from 1/31/2010 to 1/18/2038

I'm on Windows 10 with the latest updates and the time is correct and Windows shows all three certs as  "This certificate is OK."

I can email you the cert or post more details.  Like I said this only started happening on this sylpheed client.  My other mail client on another device is not complaining.  Is there a debug or verbose way to run the sylpheed logger?

Thanks,
Mike


On Thu, 4 Jun 2020 15:11:20 -0500
Rich Coe <rcoe at wi.rr.com> wrote:

> On Thu, 4 Jun 2020 11:04:25 -0400
> Mike Hogg <me at themikehogg.com> wrote:
> > > You can also verify your cert with 
> > >     openssl verify -verbose -CApath /etc/ssl/certs  your-cert.pem
> > I am just connecting to my IMAP server like usual over SSL and getting a dialog that says certificate is expired, with buttons available to me- Temporarily Accept or Reject.  But the details of the certificate for my IMAP server are in the dialog, including the expiration date, and that is not set to expire yet for another six months. 
> > 
> > This sylpheed client has been used for years with no configuration changes except that I just updated from 3.6 to 3.7 before trying the new cert file as a result of this issue but that also did not change anything. My other email clients are continuing to connect to this IMAP server without issue of course.  
> > 
> > Does anyone know what else I can try?
> 
> If the details offer a way to save the cert to a file, save it.  Otherwise,
> we'll have to find the instructions to download the cert from the server.
> 
> Then run:
> >     openssl verify -verbose -CApath /etc/ssl/certs  your-cert.pem
> 
> To see which cert in the certificate chain is expired.
> 
> Your OS and version may help.  Perhaps there's a cert update that needs to 
> be installed.
> 
> Rich
> -- 
> 


-- 
Mike Hogg <me at themikehogg.com>