OSX sslcacertfile and GMail (Basic help)

[Rainer M Krug]

Lucien Pullen <drurowin at gmail.com> writes:

> Also sprach Rainer M Krug on 2015-05-19:
>> I don't have much knowledge of all these security issues, but as far as
>> I know, the certificates are already in the keychain? Or are they there,
>> because they have been downloaded by Safari browser before?
>
> I don't use Safari, but on both computers I have access to Google's
> intermediate CA is not present in the keychain... at least not the two
> in /System/Library/Keychains/ (these correspond to the "System Roots" in
> Keychain Access).  On both computers, my login keychain also doesn't
> contain the CA.  I'm not sure about the other person's account (who does
> use Safari).

By the way - according to [1] it is hidden and you can only see it from
the terminal - I assume you checked there?

Rainer


>
> Having to use Safari in order for the certificate to be present in the
> keychain is not quite ideal, thus my question of having offlineimap take
> care of fetching the dependent CA.
>
> (From what I could tell, Certificate Assistant also could not
> automatically resolve the missing certificate, so I believe that Safari
> is installing it because it needs it, not because the security subsystem
> is taking care of things.)


Footnotes: 
[1]  http://community.centrify.com/t5/Express-for-Smart-Card/Mac-Client-Missing-SystemCACertificate-keychain-file-in-System/td-p/7220

-- 
Rainer M. Krug, PhD (Conservation Ecology, SUN), MSc (Conservation Biology, UCT), Dipl. Phys. (Germany)

Centre of Excellence for Invasion Biology
Stellenbosch University
South Africa

Tel :       +33 - (0)9 53 10 27 44
Cell:       +33 - (0)6 85 62 59 98
Fax :       +33 - (0)9 58 10 27 44

Fax (D):    +49 - (0)3 21 21 25 22 44

email:      Rainer at krugs.de

Skype:      RMkrug

PGP: 0x0F52F982
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 494 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20150519/c6986088/attachment-0003.sig>