Steve Gets A Life

mail.app and self-signed certs

if you use apple's mail.app and you get your email from a server with a self-signed certificate (because paying for a cert is a ripoff), check out this link that shows you how to download the crt file and add it to your keychain so mail.app never bothers you again. [note: this might only be for the latest mail.app which does not have a "do not show this message again" option]
here's the gist of it:

1. openssl s_client -connect mail.example.com:993 -showcerts
2. Copy the part of the output between (and including) -----BEGIN CERTIFICATE----- and-----END CERTIFICATE-----.
3. Press Control-C to exit openssl s_client. save to a file called servername.crt.
4. find that file in Finder and double click it.
5. add it to your X509 Anchors keychain.
   
   Posted by Steve on January 13, 2004 08:38 AM