Mail can't verify the identity of "imap.gmail.com"

Question

Level 1

9 points

Mail can't verify the identity of "imap.gmail.com"

I'm having problems with Mail and a Gmail IMAP account that's worked great until recently. I started receiving the following pop-up when starting Mail:

+Mail can't verify the identity of "imap.gmail.com".+

+The certificate for this server is invalid. You might be connecting to server that is pretending to be "imap.gmail.com" which could put your confidential information at risk. Would you like to connect to the server anyway?+

I've tried deleting any keychain entries that mention Gmail. I also tried logging into Gmail and disabling, then re-enabling IMAP. Also checked that correct server listed in Mail prefs. Also re-entered password in prefs. Tried it with no password saved, too.

MacBook Pro, Mac Pro, and other older ones, Mac OS X (10.5.6), Mac mini and G4 Digital Audio, running Tiger

Posted on Apr 18, 2009 8:39 PM

Reply

Answer 1

jpknox

Level 1

36 points

Apr 18, 2009 9:19 PM in response to xaximedes

Have you installed this update?:

http://support.apple.com/downloads/Mail_Update

Reply

Answer 2

xaximedes Author

Level 1

9 points

Apr 19, 2009 8:22 PM in response to jpknox

Thanks for that. Just tried it. No change.

Reply

Answer 3

sudont

Level 2

170 points

May 17, 2009 1:06 PM in response to xaximedes

I have the same exact question.

And what are you supposed to do about invalid certificates in general? I usually just ignore it and connect anyway, but with something like email, or a site where your handing over sensitive info, what should one do?

(Don't mean to hijack)

Reply

Answer 4

sudont

Level 2

170 points

May 17, 2009 2:15 PM in response to xaximedes

OK, what I ended up doing was changing to an IMAP account. I was getting the "invalid certificate" message after setting up as a POP account. I changed the server addresses' prefix from pop.gmail to imap.gmail, and no longer received the message. Mazel tov!

Reply

Answer 5

Jul 15, 2009 12:11 AM in response to sudont

i was able to get the message to go away by viewing the certificate and then it gives you the option to always allow the certificate. i then asks for a admin password and then it will never come up again.

Reply

Answer 6

Aug 11, 2009 5:18 PM in response to xaximedes

I did the exact same thing as bulldozer, and it worked:

When the message pops up, click on "View Certificate" and then check the box immediately above the certificate that says "Always trust this certificate" or alternately, go into the settings area of the certificate and from the drop down, select "Trust Certificate" for all three fields.

Browsers flag large, reputable websites for not updating their certificates. My guess is this is also the case here - a certificate that has not been updated.

Regarding IMAP accounts and Mac Mail, I can't say if this will work. I stopped using IMAP accounts in Mail, as it was unable to synch with the server (a Mac Mail problem, not my mail server).

Hope this works for you.

Reply