[Cyberduck-trac] [Cyberduck] #2938: Failure during certificate trust verification

[Cyberduck]

#2938: Failure during certificate trust verification
---------------------------------------+------------------------------------
 Reporter:  cyberduck_ch.ttl@…         |       Owner:  dkocher                  
     Type:  defect                     |      Status:  assigned                 
 Priority:  high                       |   Milestone:                           
Component:  ftp-tls                    |     Version:  3.1.2                    
 Severity:  critical                   |    Keywords:  FTP-TLS, SSL, certificate
---------------------------------------+------------------------------------

Comment(by dkocher):

 Replying to [comment:22 peter]:
 >
 > I contacted the webhosting company, and following their instructions I
 manually downloaded and installed their certificate.crt file. Although
 mydomain.com and certificatedomain.com still produced errors, now
 *.certificatedomain.com (which is exactly what's on the certificate) works
 without errors in Cyberduck, which is a workaround that will at least
 enable me to use Cyberduck without headaches now.
 >
 > Still, I would again request that since several people are experiencing
 similar problems, maybe you could please look at an alternative to using
 Keychain in a future update.

 But that is exactly the argument to ''use'' the Keychain for certificate
 validation as there ''was'' a problem with the trust validation and you
 ''must'' be warned.

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/2938#comment:24>
Cyberduck <http://cyberduck.ch>
FTP, SFTP, WebDAV, Cloud Files and Amazon S3 Browser for Mac OS X.