Package: icedove Version: 3.0.5-1 Severity: normal Tags: upstream
When using IMAPS, Icedove displays a warning if the hostname on the SSL certificate doesn't match the hostname of the mail server. Icedove allows the user to make an exception for the server, and has an option to "Permanently store this ecxeption". The exception is not permanently stored, regardless of the status of the checkbox. At my workplace, our mail server is mail.example.com. This hostname is a DNS alias that points to either mail1.example.com or mail2.example.com. Each server has an SSL certificate for its true hostname, i.e. mail1.example.com has a certificate for mail1.example.com. When I connect to mail.example.com, Icedove receives a certificate for either mail1.example.com or mail2.example.com and pops up a warning about the mismatch. The warning message pops up at seemingly random intervals. Sometimes it will operate for hours with no warning; other times it will pop up the warning multiple times in a row. I have also seen this error with Mozilla Thunderbird 3.0.x. I don't know if it's still present in Thunderbird 3.1. Prior to the relase of Thunderbird 3.0, there was an extension called "Remember Mismatched Domains". That extension fixed the problem. However, Thunderbird and Icedove 3.x have that functionality built in, so the extension does not support those versions. My workaround has been to explicitly use mail1.example.com or mail2.example.com in the mail settings. If I do that, I don't get any SSL errors. However, that's only a workaround, not a fix. -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages icedove depends on: ii debianutils 3.3 Miscellaneous utilities specific t ii fontconfig 2.8.0-2.1 generic font configuration library ii libasound2 1.0.23-1 shared library for ALSA applicatio ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib ii libcairo2 1.8.10-4 The Cairo 2D vector graphics libra ii libdbus-1-3 1.2.24-1 simple interprocess messaging syst ii libfontconfig1 2.8.0-2.1 generic font configuration library ii libfreetype6 2.4.0-2 FreeType 2 font engine, shared lib ii libgcc1 1:4.4.4-6 GCC support library ii libglib2.0-0 2.24.1-1 The GLib library of C routines ii libgtk2.0-0 2.20.1-1 The GTK+ graphical user interface ii libjpeg62 6b1-1 The Independent JPEG Group's JPEG ii libnspr4-0d 4.8.4-2 NetScape Portable Runtime Library ii libnss3-1d 3.12.6-2 Network Security Service libraries ii libpango1.0-0 1.28.1-1 Layout and rendering of internatio ii libsqlite3-0 3.6.23.1-4 SQLite 3 shared library ii libstartup-notification 0.10-1 library for program launch feedbac ii libstdc++6 4.4.4-6 The GNU Standard C++ Library v3 ii libx11-6 2:1.3.3-3 X11 client-side library ii libxrender1 1:0.9.6-1 X Rendering Extension client libra ii libxt6 1:1.0.7-1 X11 toolkit intrinsics library ii psmisc 22.11-1 utilities that use the proc file s ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime Versions of packages icedove recommends: ii myspell-en-us [myspell-dictio 1:3.2.1-2 English_american dictionary for my Versions of packages icedove suggests: ii libdbus-glib-1-2 0.86-1 simple interprocess messaging syst ii libgconf2-4 2.28.1-3 GNOME configuration database syste ii libgnome2-0 2.30.0-1 The GNOME library - runtime files ii libgnomevfs2-0 1:2.24.3-1 GNOME Virtual File System (runtime ii libgssapi-krb5-2 1.8.1+dfsg-5 MIT Kerberos runtime libraries - k ii ttf-lyx 1.6.6-2 TrueType versions of some TeX font -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
