mirror/FairEmail
1
0
Fork 0
mirror of https://github.com/M66B/FairEmail.git synced 2024-12-27 18:27:43 +00:00
Code Issues Releases Wiki Activity

Updated FAQ

Browse source
This commit is contained in:
M66B 2021-03-09 19:51:59 +01:00
parent 9ffa6a581e
commit 55c146cf56
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
FAQ.md
View file

@ -443,14 +443,23 @@ This will "pin" the server certificate to prevent man-in-the-middle attacks.
Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure, Note that older Android versions might not recognize newer certification authorities like Let’s Encrypt causing connections to be considered insecure,
see also [here](https://developer.android.com/training/articles/security-ssl). see also [here](https://developer.android.com/training/articles/security-ssl).
<br />
*Trust anchor for certification path not found* *Trust anchor for certification path not found*
*... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...* *... java.security.cert.CertPathValidatorException: Trust anchor for certification path not found ...*
means that the default Android trust manager was not able to verify the server certificate chain. means that the default Android trust manager was not able to verify the server certificate chain.
You should either fix the server configuration or accept the fingerprint shown below the error message. This could be due to the root certificate not being installed on your device
or because intermediate certificates are missing, for example because the email server didn't send them.
Note that this problem can be caused by the server not sending all intermediate certificates too. You can fix the first problem by downloading and installing the root certificate from the website of the provider of the certificate.
The second problem should be fixed by changing the server configuration or by importing the intermediate certificates on your device.
You can pin the certificate too, see above.
<br />
*Empty password* *Empty password*