Root Certificate

D

D. Michael Allen

Like a couple of others, I'm getting the error regarding the invalid root
certificate when trying to connect to an Exchange 2003 server using
Entourage 2004.

I'm using a self-signed certificate and it appears as a trusted root cert in
the x509 keychain.

This should work, but it is not.

I think I have it narrowed down to the following: The certificate is for
place1.work.local . When I ping that address, it cannot be resolved. When I
enter 100.100.100.1, the IP addy for place1.work.local, I can ping it just
fine. When I point Entourage at 100.100.100.1, it gives me the root
certificate error and nothing happens.

If I use Outlook Web Access to either of those addresses, it works fine,
except Firefox keeps asking me for a password, but I hit ignore and it loads
fine. Also, POP in Entourage works fine from mail.work.local .

Any help would be appreciated. Ideas of things to try, etc.

I'm the only mac user here and if I can get exchange to work, I can get the
PC off my desk and out of here.
 
C

Chris Ridd

Like a couple of others, I'm getting the error regarding the invalid root
certificate when trying to connect to an Exchange 2003 server using
Entourage 2004.

I'm using a self-signed certificate and it appears as a trusted root cert in
the x509 keychain.

This should work, but it is not.

I think I have it narrowed down to the following: The certificate is for
place1.work.local . When I ping that address, it cannot be resolved. When I
enter 100.100.100.1, the IP addy for place1.work.local, I can ping it just
fine. When I point Entourage at 100.100.100.1, it gives me the root
certificate error and nothing happens.

Yes, that's how SSL is meant to work. The name the server provides in its
certificate *must* be identical to the name Entourage used to contact the
server. This helps prevent someone else sending you their cert and fooling
you into thinking you're connected to the right server.
If I use Outlook Web Access to either of those addresses, it works fine,
except Firefox keeps asking me for a password, but I hit ignore and it loads
fine. Also, POP in Entourage works fine from mail.work.local .

Any help would be appreciated. Ideas of things to try, etc.

Add this line to your /etc/hosts file:

100.100.100.1 place1.work.local

As this file is owned by root, you need to use sudo at the terminal.
Alternatively, TextWrangler (free download from BareBones) will prompt you
for your admin password and let you modify it.

Then you *should* be able to ping place1.work.local, and make Entourage
connect to place1.work.local.
I'm the only mac user here and if I can get exchange to work, I can get the
PC off my desk and out of here.

All right!

Cheers,

Chris
 
Top