[Cyberduck-trac] [Cyberduck] #2938: Failure during certificate trust verification

[Cyberduck]

#2938: Failure during certificate trust verification
---------------------------------------+------------------------------------
 Reporter:  cyberduck_ch.ttl@…         |       Owner:  dkocher                  
     Type:  defect                     |      Status:  assigned                 
 Priority:  high                       |   Milestone:  3.1.3                    
Component:  ftp-tls                    |     Version:  3.1.2                    
 Severity:  critical                   |    Keywords:  FTP-TLS, SSL, certificate
---------------------------------------+------------------------------------

Comment(by dkocher):

 Replying to [ticket:2938 cyberduck_ch.ttl@…]:
 > My webhost uses a FTP-TLS connection. The SSL certificate is not in my
 domain's name, but in the webhost's name. Every time I try to do anything,
 upload, download, whatever, I get an error:
 >
 > The certificate for this server is invalid. You might be connecting to a
 server that is pretending to be… (etc. etc.) …Would you like to connect to
 the server anyway?
 >
 > I click Show Certificate.
 > I highlight the certificate's domain name.
 > I check the box "Always trust these certificates".
 > I click continue.
 >
 > And then I get this every time anyway.

 Have you tried restarting Cyberduck, after modifiying the trust setting
 for the certificate? The Keychain API has a known bug that settings are
 cached and therefore you receive a second prompt even if you just
 explicitly trusted it before.

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/2938#comment:12>
Cyberduck <http://cyberduck.ch>
FTP, SFTP, WebDAV, Cloud Files and Amazon S3 Browser for Mac OS X.