Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

My computer can beat up your computer. -- Karl Lehenbauer


computers / comp.sys.mac.system / Re: Adding New Let's Encrypt Certificate for old Mac OS and iOS

SubjectAuthor
o Re: Adding New Let's Encrypt Certificate for old Mac OS and iOSsuper70s

1
Re: Adding New Let's Encrypt Certificate for old Mac OS and iOS

<super70s-3C3B42.17421213102021@reader02.eternal-september.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=13031&group=comp.sys.mac.system#13031

  copy link   Newsgroups: comp.sys.mac.vintage comp.sys.mac.system
Path: rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: super...@super70s.invalid (super70s)
Newsgroups: comp.sys.mac.vintage,comp.sys.mac.system
Subject: Re: Adding New Let's Encrypt Certificate for old Mac OS and iOS
Date: Wed, 13 Oct 2021 17:42:12 -0500
Organization: A noiseless patient Spider
Lines: 29
Message-ID: <super70s-3C3B42.17421213102021@reader02.eternal-september.org>
References: <dog_cow-1633054331@macgui.com>
Injection-Info: reader02.eternal-september.org; posting-host="4af2fac26fc11b2d694469e58649a9b2";
logging-data="12255"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18ISUBjHEIICT8ewtKuSL809FyJnqghV0U="
User-Agent: MT-NewsWatcher/3.5.3b3 (PPC Mac OS X)
Cancel-Lock: sha1:0JfaIeQvdYaYJBAHxn0qvCl16E4=
X-No-Archive: yes
 by: super70s - Wed, 13 Oct 2021 22:42 UTC

In article <dog_cow-1633054331@macgui.com>,
D Finnigan <dog_cow@macgui.com> wrote:

> Today, one of Let's Encrypt's chain-of-trust certificates expired. This
> caused some of my older Apple devices to give a certificate warning when
> trying to access some web sites.
>
> The fix is simple: you just need to add the new Let's Encrypt certificate to
> the certificate trust store in iOS. The new certificate that you need to add
> is called ISRG Root X1. You can get the PEM file here:
> https://letsencrypt.org/certs/isrgrootx1.pem
>
> If your machine can't access the Let's Encrypt web site because it doesn't
> support newer versions of TLS, then you need to download the PEM file on a
> newer computer, then put it on a web server that supports plain HTTP or an
> older TLS version, and download from there. I'm sure most people reading
> this newsgroup know how to set up a local web server at home to do this.

I didn't have a browser problem but both my Tenfourbird mail app on my
Power Mac G4 running 10.4 and Apple Mail app on my 2009 iMac running
10.11 quit connecting last week. I called my ISP who were clueless
("we'd be getting a lot of calls about this if our mail server was
down") but I finally figured it out after a little web searching and
installed the new certificate on both machines. Both mail accounts
started working normally.

Something strange though, the new certificate says it will expire in
Nov. 2021 but I'm not sure if it will or not. Guess I'll find out in
November.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor