Author Topic: Invalid SSL Certificate Message  (Read 8455 times)

KJL

  • Newbie
  • *
  • Posts: 1
Invalid SSL Certificate Message
« on: March 07, 2015, 08:29:06 pm »
Invalid SSL Certificate message started appearing when I tried to send an email using the free AquaMail version on my LG Android with Gingerbread 3.2 operating system today. All features seemed to work fine last night and nothing has changed on my end. Multiple emails went through fine last night.The email is sitting in drafts and now I can't even get the account to sync. Powering it down and restarting didn't help.

I can browse the web and access my yahoo email account through the browser using the yahoo website. My gmail account also works fine. AquaMail is the only app that appears to have issues.

Please fix on your end or give me suggestion on how I can fix it here.

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Invalid SSL Certificate Message
« Reply #1 on: March 07, 2015, 10:36:21 pm »
Not sure how this:

>> I can browse the web and access my yahoo email account through the browser using the yahoo website.

Relates to this:

>>> [...] AquaMail is the only app that appears to have issues.

Seems like something's broke on Yahoo's side (oh miracle!!! they've only had three outages over the last three months).

Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Invalid SSL Certificate Message
« Reply #2 on: March 07, 2015, 10:57:38 pm »
Just in case, outgoing server settings for Yahoo. To change, long press the account in Aqua -> Account setup -> Manual -> Next.

smtp.mail.yahoo.com
SSL (strict) or SSL (accept any)
port 465
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

wilma

  • Newbie
  • *
  • Posts: 2
google: Invalid SSL Certificate Message
« Reply #3 on: September 02, 2015, 06:53:35 pm »

Hallo,

since some hours Aquamail is telling me, that imap.gmail.com:993 changed the ssl-Certificate.

a bug? can I proof that?

I have just updated to the latest beta 1.5.9.12-pre7.1.
Still the same error .... :(

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Invalid SSL Certificate Message
« Reply #4 on: September 02, 2015, 07:05:55 pm »
Yes, Google changing GMail's SSL certificates again, and not doing it in sync on all servers.

Please see the FAQ (search for SSL):

http://www.aqua-mail.com/?page_id=227
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

StR

  • Hero Member
  • *****
  • Posts: 1558
Re: Invalid SSL Certificate Message
« Reply #5 on: September 02, 2015, 10:04:19 pm »
I am confirming, - I also just got a notification from Aquamail that Gmail's SSL certificate has changed. 
After I accepted the new certificate, Aquamail continued working just fine.

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Invalid SSL Certificate Message
« Reply #6 on: September 02, 2015, 10:43:53 pm »
If you asked AquaMail to track SSL cert changes, it's going to do exactly that.

There is nothing "magical" about Gmail certs, they're tracked like any other server's, and when they change, the app stops and notifies you about it, just as it's supposed to.

There is one "fine" point here -- since Google can't manage to update the certs on all the load-balanced IMAP servers at once (rolling out the new logo seems to be going better) -- you may get this error multiple times, if you accept the "new" cert and then, due to load-balancing, the app hits a server with the "old" cert.

This too counts as a change, and it is, the cert is going to be different.

One the entire IMAP "server farm" is updated to the new cert, and you've accepted this cert, the errors will stop.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

mikeone

  • Hero Member
  • *****
  • Posts: 2762
Re: google: Invalid SSL Certificate Message
« Reply #7 on: September 03, 2015, 08:40:36 am »

Hallo,

since some hours Aquamail is telling me, that imap.gmail.com:993 changed the ssl-Certificate.

a bug? can I proof that?

I have just updated to the latest beta 1.5.9.12-pre7.1.
Still the same error .... :(
You should try the modified build, just created by Kostya "overnight":
http://www.aqua-mail.com/forum/index.php?topic=3919.0