You can specify the trust level for each certificate using Keychain Access. In this case, you need to keep all your private keys in the Keychain to be able to decrypt old messages, but you only want your latest private key to be used to sign any new email messages.įortunately there is a solution. This can cause a problem with Mail if you have multiple certificates, for example if you are switching from one CA to another. Unlike most other security applications, there are no preference settings in Mail or Safari to choose which key and certificate to use. Mail automatically recognises that secure email is possible and provides options in the compose window to sign and/or encrypt.Import the Certification Authority (CA) certificate into the X509Anchors keychain, so that certificates issued by this CA are trusted.Import the key and certificate pair into the Keychain, such as by double clicking on the.Generate a key and certificate pair, using a product such as SimpleAuthority or the Certificate Assistant (see this hint).These applications use keys and certificates that are stored in the Keychain.įor example, to enable secure email with Mail, the basic steps are:
Applications like Mail and Safari support the use of digital certificates for secure email and client SSL authentication.
0 kommentar(er)
