Mail and Certificate

Question

Hello
today I changed my Mail Connection to SSL. But now a message box always appears. There is a help topic from Apple. I have done: I added the certificate to Keychain with X.509 Anchors and changed the trust settings to "alwasys trus"...
But there is no difference: Everytime I startup Mail the dialogue box appears again...
Any Ideas?
Thanx, and Greetings from Germany
MacBook Pro   Mac OS X (10.4.8)  

Answer 1

I don't know whether this will be helpful to you or not, but, when you added the X509 certificate, how exactly did you do it? When the "Unable to verify SSL server..." dialog box appeared, did you...
1. click on the Show Certificate button
2. drag certficate icon at top left hand corner of extended dialog box to desktop
3. double-click on that icon which will launch the Keychain Access
4. choose X509 Anchors at the pulldown menu
5. then import certificate into keychain
if that's not how you did it, try that. If that still doesn't work, try again, except insert these steps and complete remaining steps in admin-privileged account:
2.1. fast-switch user to admin account
2.2 start Terminal
2.3 move file from regular user account's Desktop to admin account's Desktop:
sudo mv /Users/{prevShortUserName}/Desktop/{fileNameOfCertFile} ~/Desktop/
2.4 change ownership of certfile from regular user to admin user:
sudo chown {adminShortUserName}:{adminGroupName} Desktop/{fileNameOfCertFile}
In Terminal, if you type
grep {domainNameOfMailserverYouAreTryingToAdd} /System/Library/Keychains/X509Anchors
and the mailserver's X509 anchor has, in fact, been added, you should get a response that says
Binary file /System/Library/Keychains/X509Anchors matches
(you may have to do this "grep" from an admin-privileged account)
Also, in Terminal (possibly as an admin user) if you type
ls -lT /System/Library/Keychains/X509Anchors
(those are lower-case "L" in the "ls" and the "-lT") you should see a file modification date and time matching when the anchor was added to the keychain.
I have one other thing you might try, with absolutely no guarantees of success, so I'll hold off on suggesting it until you post back with an outcome for these suggestions.
(if this solves your problem, or is actually helpful towards arriving at a solution to your problem, please consider marking this reply as "helpful" or "solved," in addition to, if applicable, marking this question as "answered"