AquaMail Forum

English - Android => Bug reports => Topic started by: reach on November 05, 2017, 04:34:15 am

Title: certificate issue after update to 1.12
Post by: reach on November 05, 2017, 04:34:15 am

Hi there,
last night Aquamail got updated automatically. Since then 2 of my 3 accounts don't work any more. When I press update it throws an error message (grey screen overlay) saying: invalid security certificate (SSL): Hostname in certificate didn't match: <imap.myemail.domain> ...

The app became hence totally useless. Am I the only one experiencing this problem?

Thx,
reach

Title: Re: certificate issue after update to 1.12
Post by: reach on November 05, 2017, 04:42:21 am

the issue went away by just editing the account and press "next, save and save", without changing anything.
It's ok now. Still this happened for the first time since I'm using AM and clearly related to the update.
Never mind :-)

Title: Re: certificate issue after update to 1.12
Post by: Kostya Vasilyev on November 05, 2017, 02:42:44 pm

Yes in 1.12 we added logic to validate names found in server SSL certificates vs. whatever your server names are.

Title: Re: certificate issue after update to 1.12
Post by: zekeman on November 07, 2017, 12:34:07 am

How do we turn off the check?  I have a proxy in front of my mail server (inumbo) to deter spam and it's interfering with my ability to get mail.

Title: Re: certificate issue after update to 1.12
Post by: zekeman on November 07, 2017, 07:32:37 pm

Quote from: Kostya Vasilyev, Aqua Mail on November 05, 2017, 02:42:44 pm

Yes in 1.12 we added logic to validate names found in server SSL certificates vs. whatever your server names are.

Is there a work around or ability to turn this off? I haven't been able to receive email since the upgrade and there doesn't seem to be a way to roll back the update.

Title: Re: certificate issue after update to 1.12
Post by: Kostya Vasilyev on November 07, 2017, 09:36:42 pm

Yes there is a way to turn this off:

Please long press on the account (on the app's main screen) -> Account setup -> Manual.

Change "SSL (strict)" under "security" to "SSL (accept any)" and you'll be pretty much back to how 1.11 worked.

The new server name / certificate names checks will *not* be made anymore.

Title: Re: certificate issue after update to 1.12
Post by: HelRa2506 on November 10, 2017, 02:15:48 pm

Had the same problem but only under Android 4.4. Your solution works, thank you!  :)

Title: Re: certificate issue after update to 1.12
Post by: Kostya Vasilyev on November 10, 2017, 08:12:10 pm

I just posted a more detailed explanation here:

https://www.aqua-mail.com/forum/index.php?topic=6214.0