[Cyberduck-trac] [Cyberduck] #2938: Failure during certificate trust verification

Cyberduck trac at trac.cyberduck.ch
Mon Apr 6 07:54:30 CEST 2009


#2938: Failure during certificate trust verification
---------------------------------------+------------------------------------
 Reporter:  cyberduck_ch.ttl@…         |       Owner:  dkocher                  
     Type:  defect                     |      Status:  assigned                 
 Priority:  high                       |   Milestone:                           
Component:  ftp-tls                    |     Version:  3.1.2                    
 Severity:  critical                   |    Keywords:  FTP-TLS, SSL, certificate
---------------------------------------+------------------------------------

Comment(by peter):

 I am the original poster of this ticket, using OS 10.4.11. "Always trust
 these certificates" still does not work for me. Cyberduck does not
 remember the "Always trust these certificates" selection. I have tried
 "Always trust these certificates" + "Always trust" (under Trust Settings)
 and also "Always trust these certificates" + "Use system settings".

 I went into Keychain Access First Aid and tried to verify/repair
 permissions, but there were no problems with my Keychain permissions. I
 used Disk First Aid to repair my disk permissions, and that didn't help
 either.

 Finally I used the freeware program AppDelete to get rid of everything
 associated with Cyberduck, then I downloaded a fresh copy of Cyberduck,
 rebooted, and tried again. The problem still exists. Cyberduck does not
 even remember the Always Trust setting from one download to the next.

 I tried a workaround: instead of ftps://mydomain.com I tried
 ftps://certificatedomain.com (where *.certificatedomain.com is the domain
 name on the certificate) and this also did not work.

 I think this may be an OS problem in 10.4.11, because I have a related
 problem with the same domain in Safari 3.1.2. Every time I open Safari, I
 need to click Continue on a certificate warning dialog. Even if I choose
 Always Trust, Safari forgets that choice the next time I launch the
 browser. It doesn't matter whether I change the settings in Safari or
 Keychain Access.

 Maybe the best fix for Cyberduck would be not to use Keychain, but store
 the certificates and passwords some other way.

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/2938#comment:20>
Cyberduck <http://cyberduck.ch>
FTP, SFTP, WebDAV, Cloud Files and Amazon S3 Browser for Mac OS X.


More information about the Cyberduck-trac mailing list