OSX sslcacertfile and GMail (Basic help)
Rainer M Krug
Rainer at krugs.de
Tue May 19 08:54:37 BST 2015
And a last one: maybe
http://community.centrify.com/t5/Centrify-Identity-Service/What-Is-SystemCACertificates-keychain-and-How-To-Use-It/ba-p/12554
helps - it seems that they are installed by default.
Rainer
Lucien Pullen <drurowin at gmail.com> writes:
> Also sprach Rainer M Krug on 2015-05-19:
>> I don't have much knowledge of all these security issues, but as far as
>> I know, the certificates are already in the keychain? Or are they there,
>> because they have been downloaded by Safari browser before?
>
> I don't use Safari, but on both computers I have access to Google's
> intermediate CA is not present in the keychain... at least not the two
> in /System/Library/Keychains/ (these correspond to the "System Roots" in
> Keychain Access). On both computers, my login keychain also doesn't
> contain the CA. I'm not sure about the other person's account (who does
> use Safari).
>
> Having to use Safari in order for the certificate to be present in the
> keychain is not quite ideal, thus my question of having offlineimap take
> care of fetching the dependent CA.
>
> (From what I could tell, Certificate Assistant also could not
> automatically resolve the missing certificate, so I believe that Safari
> is installing it because it needs it, not because the security subsystem
> is taking care of things.)
--
Rainer M. Krug, PhD (Conservation Ecology, SUN), MSc (Conservation Biology, UCT), Dipl. Phys. (Germany)
Centre of Excellence for Invasion Biology
Stellenbosch University
South Africa
Tel : +33 - (0)9 53 10 27 44
Cell: +33 - (0)6 85 62 59 98
Fax : +33 - (0)9 58 10 27 44
Fax (D): +49 - (0)3 21 21 25 22 44
email: Rainer at krugs.de
Skype: RMkrug
PGP: 0x0F52F982
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 494 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20150519/7b4887b8/attachment-0003.sig>
More information about the OfflineIMAP-project
mailing list