OSX sslcacertfile and GMail (Basic help)

Rainer M Krug Rainer at krugs.de
Tue May 19 08:54:37 BST 2015


And a last one: maybe
http://community.centrify.com/t5/Centrify-Identity-Service/What-Is-SystemCACertificates-keychain-and-How-To-Use-It/ba-p/12554
helps - it seems that they are installed by default.

Rainer

Lucien Pullen <drurowin at gmail.com> writes:

> Also sprach Rainer M Krug on 2015-05-19:
>> I don't have much knowledge of all these security issues, but as far as
>> I know, the certificates are already in the keychain? Or are they there,
>> because they have been downloaded by Safari browser before?
>
> I don't use Safari, but on both computers I have access to Google's
> intermediate CA is not present in the keychain... at least not the two
> in /System/Library/Keychains/ (these correspond to the "System Roots" in
> Keychain Access).  On both computers, my login keychain also doesn't
> contain the CA.  I'm not sure about the other person's account (who does
> use Safari).
>
> Having to use Safari in order for the certificate to be present in the
> keychain is not quite ideal, thus my question of having offlineimap take
> care of fetching the dependent CA.
>
> (From what I could tell, Certificate Assistant also could not
> automatically resolve the missing certificate, so I believe that Safari
> is installing it because it needs it, not because the security subsystem
> is taking care of things.)

-- 
Rainer M. Krug, PhD (Conservation Ecology, SUN), MSc (Conservation Biology, UCT), Dipl. Phys. (Germany)

Centre of Excellence for Invasion Biology
Stellenbosch University
South Africa

Tel :       +33 - (0)9 53 10 27 44
Cell:       +33 - (0)6 85 62 59 98
Fax :       +33 - (0)9 58 10 27 44

Fax (D):    +49 - (0)3 21 21 25 22 44

email:      Rainer at krugs.de

Skype:      RMkrug

PGP: 0x0F52F982
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 494 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/offlineimap-project/attachments/20150519/7b4887b8/attachment-0003.sig>


More information about the OfflineIMAP-project mailing list