Untrusted Server Certificate on MD2008, but MD2010 works??
Hello,
I've been using MD2008 using OFX to download from my financial institution (America First Credit Union) and its been working fine. Recently, I started receiving an error while trying to download transactions:
Error: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Untrusted Server Certificate Chain
This seems to be a fairly common error when certificates expire. The institution is in MD's OFX list. I contacted the institution and they said their certificate had been updated, though I am still having problems. I tried installing the most recent version of MD2008 on a clean machine (never had MD installed) and just created a new file to work with. When I try to even setup OFX using the institution, I receive the same error. If I repeat the process and install MD2010 on a clean machine, it works fine -- whats up with that??? Since MD2008 worked fine with them at one point, I can only assume that something on the OFX or institution side changed that causes it to break with MD2008. Or perhaps there really is a problem and MD2010 isn't as strict so it allows it to connect.
Any ideas on this?
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
1 Posted by ljb on 18 Mar, 2010 10:09 PM
Yes. As they said, they updated their certificate. What they didn't tell you is that their new certificate is signed using a different Certificate Authority (CA) certificate, compared to their old one. In order for MD to accept and trust a certificate, MD has to have the CA certificate which was used to sign it. MD2008 did not have that specific CA certificate; MD2010 does. (Nothing to do with being less strict.)
2 Posted by zukakog on 09 Apr, 2010 05:10 PM
And for the love of all that is good, will this be fixed in MD2008? I bought MD2010, but can't stand the way it handles matching.
3 Posted by Ben Spencer on 09 Apr, 2010 07:22 PM
There is a preview build of Md2008. (build 643). It contains a number of updated certificates. If you are not using it it can be downloaded from here:
http://moneydance.com/preview/
Ben Spencer
Moneydance Support
4 Posted by zukakog on 09 Apr, 2010 07:37 PM
Thanks Ben!
This is why I like dealing with the folks behind MD. The preview build fixed it.
5 Posted by Ben Spencer on 09 Apr, 2010 07:46 PM
You are welcome. I am sorry about the delayed response on this enquiry.
Ben
Ben Spencer closed this discussion on 09 Apr, 2010 07:46 PM.