Trying SSL workaround how to find root certificate?

S

ssciarrino

having the problem described on Microsoft MVP Entourage website and told to
do this in terminal:

sudo certtool i root_certificate.cer v k=/System/Library/Keychains/X509Anchors

To replace root_certificate.cer with your certificate filename.

Where would my roo_certificate file be located on my Mac?
 
C

Corentin Cras-Méneur

having the problem described on Microsoft MVP Entourage website and
told to do this in terminal:
sudo certtool i root_certificate.cer v
k=/System/Library/Keychains/X509Anchors
To replace root_certificate.cer with your certificate filename.
Where would my roo_certificate file be located on my Mac?


Well to import it you have to download it first.... Did you ask your
Web Admin how to get it?

Corentin
 
S

ssciarrino

I know I have to go to mmc on the mail server and add the snap-in
Certificates but from where is the 'root certificate'

Which certificate is considered the 'root certificate' on the mail server?

Corentin Cras-Méneur said:
Well to import it you have to download it first.... Did you ask your
Web Admin how to get it?

Corentin
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire
 
W

William Smith

ssciarrino said:
having the problem described on Microsoft MVP Entourage website and told to
do this in terminal:

sudo certtool i root_certificate.cer v k=/System/Library/Keychains/X509Anchors

To replace root_certificate.cer with your certificate filename.

Where would my roo_certificate file be located on my Mac?

If you use Safari, you may be able to download the root certificate file.

Log in to your Exchange account via Safari using OWA. Then locate the
"lock" icon in the upper right corner of the browser window. Click it to
display the server's SSL certificate.

In the certificate window, if necessary, twiddle open the disclosure
triangle next to Details.

Scroll through the details and look for the blue links. One of the URIs
will be a link to your root certificate. Download that to your Desktop
and then import from there.

Since I don't have extensive experience with more than a couple of
Exchange Servers I can't guarantee yours is set up to allow you to do
this, but so far I've been able to provide these instructions to others
and they have been able to retrieve their server's root certificate.

Hope this helps!

--

bill

William M. Smith, Microsoft Interop MVP - Mac/Windows
Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
 
S

ssciarrino

Bill thanks for the help...

the links all have extension .crl NOT .cer would this mean I am unable to
download the .cer file or does this mean I need to convert the .crl into a
..cer.

If to convert how do I convert .crl to .cer?
 
W

William Smith

ssciarrino said:
Bill thanks for the help...

the links all have extension .crl NOT .cer would this mean I am unable to
download the .cer file or does this mean I need to convert the .crl into a
.cer.

If to convert how do I convert .crl to .cer?

A .crl is a certificate revocation list. If you don't see a certificate
file to download then this may not work for you.

--

bill

William M. Smith, Microsoft Interop MVP - Mac/Windows
Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top