SSL Certificate check message in Evolution

Asked by Nick Crenshaw

I am running Ubuntu 10.,04 with Evolution mail client and ATT DSL service. Recently (within the last month or two) I have been receiving SSL Certificate check messages when viewing certain emails, most notably those with graphics or pictures. Sometimes there are ten or more messages generated by a single email. This is becoming problematic.

I have been used Evolution for over a year and the problem just started recently.
Does anyone have the solution?
Is the problem within Evolution, its settings, or AT&T services?

The following is a copy of one of the message.

     SSL Certificate check for d3eiloi9duvkcu.cloudfront.net:

     Issuer: CN=DigiCert High Assurance CA-3,OU=www.digicert.com,O=DigiCert Inc,C=US
     Subject: CN=*.cloudfront.net,O="Amazon.com, Inc.",L=Seattle,ST=Washington,C=US
    Fingerprint: 59:76:df:54:f8:26:f8:a1:bb:01:8f:26:ed:25:19:80
    Signature: BAD

    Do you wish to accept?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu evolution Edit question
Assignee:
No assignee Edit question
Solved by:
Nick Crenshaw
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

Lucid desktop is EOL in April 2013. I suggest you upgrade soon.

Revision history for this message
Thomas Krüger (thkrueger) said :
#2

The evolution version in Lucid is rather old. It's from September 2009. The CA certificates in it are this old as well.
The server you are connecting to, has a certificate in it's certification chain, that was issued in 2010 and is therefor unknown to Evolution.

Your options:
a) update to Ubuntu 12.04 LTS (recommended)
b) - goto https://www.digicert.com/digicert-root-certificates.htm
  - check if certificate check of browser shows "DigiCert, Inc." (in Firefix left of the URL field)
  - download the .crt file for the certifikate that is complained about ("DigiCert High Assurance CA-3")
  - go into Evolutions settings → Certificates → 3rd tab and import the file downloaded

Revision history for this message
Nick Crenshaw (nick-crenshaw) said :
#3

Thank you both. I didn't want to upgrade to the newer interface but I guess I'll have to.

Revision history for this message
Enbie (noelb-ausics) said :
#4

piss poor response

10.04 is an LTS

WTF is the point of having an LTS version of an operating system if you don't keep simple things like this updated!

Even Microsoft can get THAT right!