IMAP Certificate Validation Error

A new SSL cert was installed on imap.eecs on Thursday night. This unfortunately required a new “chain” certificate as Entrust is moving to 2048 bit keys (current keys are 1024 bits). Normally the IMAP server should present this chain cert to the user’s mail client so that the process would be invisible to the end user. However, the chain cert was not installed on the server initially, so the server could not present the cert, and clients were getting a certificate validation error.

Around 2:30pm on Friday, the chain cert was properly installed on the server and after that most of clients began working again. At least one user is still experiencing issues with Windows Mobile and Xpressmail.

---

UPDATE

[2009-11-05 09:27:08 | Eric Fraser]

The one remaining open issue with the Certificate upgrade was with an Xpress Mail client. The vendor has confirmed that they do not yet support 2048-bit certificates.

Resolved as of 2009-11-05 09:22:00