dovecot - Jun 2014 - ot: accepting self certs into win pc?

few month ago, I've got a new Dovecot/Postfix server with self issued
certificate (like the previous server), transferred users, all went well

EXCEPT for one user on Win/Outlook (or Outlook Express) who tells me his
new PC 'doesn't want to accept certificate' (sorry, I'm short on
exact
details at this time)

I need to get it sorted out, I expect it 'should just work' like it did
for other users, BUT, before I start looking, trying to 'educate myself'
better

if any one has any pointers, dos or don't regarding win email clients with
self certified server, pls point me that way

is using IE with www.dom.com/mycert.crt good point to start ? (after
copying mycer.crt to web linked directory first?)

thanks,
V

On 10/06/2014 01:48, voytek at sbt.net.au wrote:
> few month ago, I've got a new Dovecot/Postfix server with self issued
> certificate (like the previous server), transferred users, all went well
>
> EXCEPT for one user on Win/Outlook (or Outlook Express) who tells me his
> new PC 'doesn't want to accept certificate' (sorry, I'm
short on exact
> details at this time)
>
> I need to get it sorted out, I expect it 'should just work' like it
did
> for other users, BUT, before I start looking, trying to 'educate
myself'
> better
>
> if any one has any pointers, dos or don't regarding win email clients
with
> self certified server, pls point me that way
>
> is using IE withwww.dom.com/mycert.crt  good point to start ? (after
> copying mycer.crt to web linked directory first?)
>
> thanks,
> V
I get endless grief over this, but if you think Microsoft is bad, try 
Apple. I wrote some notes on it once:

http://blog.frankleonhardt.com/2012/certificate-errors-on-internet-explorer-9-and-how-to-stop-them/

I didn't mention it in the post, but IIRC this did work for making some 
versions Outlook (and other Microsoft Mail things) happy at the same time.

Regards, Frank.