Author Topic: certificate issue after update to 1.12  (Read 3317 times)

reach

  • Newbie
  • *
  • Posts: 3
certificate issue after update to 1.12
« on: November 05, 2017, 04:34:15 am »
Hi there,
last night Aquamail got updated automatically. Since then 2 of my 3 accounts don't work any more. When I press update it throws an error message (grey screen overlay) saying: invalid security certificate (SSL): Hostname in certificate didn't match: <imap.myemail.domain> ...

The app became hence totally useless. Am I the only one experiencing this problem?

Thx,
reach

reach

  • Newbie
  • *
  • Posts: 3
Re: certificate issue after update to 1.12
« Reply #1 on: November 05, 2017, 04:42:21 am »
the issue went away by just editing the account and press "next, save and save", without changing anything.
It's ok now. Still this happened for the first time since I'm using AM and clearly related to the update.
Never mind :-)

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: certificate issue after update to 1.12
« Reply #2 on: November 05, 2017, 02:42:44 pm »
Yes in 1.12 we added logic to validate names found in server SSL certificates vs. whatever your server names are.

Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

zekeman

  • Newbie
  • *
  • Posts: 2
Re: certificate issue after update to 1.12
« Reply #3 on: November 07, 2017, 12:34:07 am »
How do we turn off the check?  I have a proxy in front of my mail server (inumbo) to deter spam and it's interfering with my ability to get mail.

zekeman

  • Newbie
  • *
  • Posts: 2
Re: certificate issue after update to 1.12
« Reply #4 on: November 07, 2017, 07:32:37 pm »
Yes in 1.12 we added logic to validate names found in server SSL certificates vs. whatever your server names are.

Is there a work around or ability to turn this off? I haven't been able to receive email since the upgrade and there doesn't seem to be a way to roll back the update.

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: certificate issue after update to 1.12
« Reply #5 on: November 07, 2017, 09:36:42 pm »
Yes there is a way to turn this off:

Please long press on the account (on the app's main screen) -> Account setup -> Manual.

Change "SSL (strict)" under "security" to "SSL (accept any)" and you'll be pretty much back to how 1.11 worked.

The new server name / certificate names checks will *not* be made anymore.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

HelRa2506

  • Newbie
  • *
  • Posts: 1
Re: certificate issue after update to 1.12
« Reply #6 on: November 10, 2017, 02:15:48 pm »
Had the same problem but only under Android 4.4. Your solution works, thank you!  :)

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: certificate issue after update to 1.12
« Reply #7 on: November 10, 2017, 08:12:10 pm »
I just posted a more detailed explanation here:

https://www.aqua-mail.com/forum/index.php?topic=6214.0
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/