Geeklair.net SSL

So, using Mac OS X and sick of warnings about geeklair.net's SSL certificate?

You can solve this by importing the geeklair.net CA certificate. (Hint, an OS upgrade could obliterate this change, so you might want to wait until after installing 10.3. Also, the certtool command on 10.2 won't correctly add the key unless you copy the X509Anchor file to you ~/Library/Keychains/ directory first, use k=X509Anchors, and then copy the ~/Library/Keychains/X509Anchors file back into /System/Library/Keychains ... basically wait until getting 10.3 and do it then).

1. Download the geeklair.net CA cert.
2. Open Terminal
3. run `sudo certtool i ca.crt k=/System/Library/Keychains/X509Anchors`

Make sure you're in the directory where the ca.crt file was downloaded to.

You should be all set. Mail and Safari should stop complaining about the geeklair SSL certificates.

Note that under linux, using Firebird and Thunderbird, you can just tell it to import the key on your first connect and it will be happy.

| 1 Comment | 1 TrackBack

1 TrackBack

Because of the recovery, you may notice that geeklair.net has new ssh host keys. You'll also probably notice that there... Read More

1 Comment

ah.. much better. thanks for the info!

Powered by Movable Type 4.34-en
Creative Commons License
This blog is licensed under a Creative Commons License.