You need to get the certificate and import it into keychain access and tell keychain access to accept it. This technique will only work for SSL ports. For TLS it won't work.

If necessary run this command in Termminal substituting the DNS name of your server for "host" and the port for 636 if it differs:

openssl s_client -connect "host:636" -showcerts  

If you get a bunch of text copy and paste the parts from the

-----BEGIN CERTIFICATE-----

until and including the

-----END CERTIFICATE-----

into a file called host.cert double clicking on host.cert should open keychain acess and allow you to accept the certificate.

[ Reply to This | # ]