Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to not purchase a certificate, and instead am creating a self-signed key architecture.

I used the instructions on for doing the setup. Then I installed the key on my server, I told Thunderbird to include my certificate authority. Then, I try to connect to, imap (port 143), using starttls, and Thunderbird gets angry about the cert. It says...

You are about to override how Thunderbird identifies this site.  Legitimate banks <blah blah blah>
Certificate Status
This site attempts to identify itself with invalid information.
*Wrong Site*
Certificate belongs to a different site, which could indicate an identity theft.

If I connect Thunderbird to port 993, instead, I get the same message (except the Location field is updated to reflect port 993).

So... I tell it to view the certificate. Clear as day, exactly as I told it, it says the Common Name (CN) is I can see no typos, no name mismatches, nothing except that the port number is different.

If I use 'openssl s_client' to connect, I get a connection just fine, but openssl does complain a little about being unable to verify some certificates (I assume openssl just doesn't know where I've got my CA key squirreled away, but I'm not sure on that, either).

What could be going wrong here? I've done a lot of searches, and never found this problem listed anywhere! So I am at a total loss on how to even begin diagnosing this.

share|improve this question

Maybe you can try connect with openssl specifying the CA certificate file:

openssl s_client -connect -CAfile *(your CA certificate file*
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .