Hey!

Well what is normally done is adding the certificate to the jvm keystore where the java app(Kunagi) in this case is running. I tried this and didn't work anyway, still java didn't like my self signed certificate.

What I did to bypass this was implenting my own TrustManager for connecting to a ftp server we have with a self signed certificate. You can see the code here:

//Declare our own X509 trust manager 
      this.trustManager = new TrustManager[] {
          //Initialize the array with our own implementation of the X509TrustManager
          new X509TrustManager() {
            
            public X509Certificate[] getAcceptedIssuers() {
              return null;
            }
            public void checkClientTrusted(X509Certificate[] certs, String authType) {
              
            }
            /* This is the method that really checks the certitficate */
            public void checkServerTrusted(X509Certificate[] certs, String authType) {
              logger.info("Bypassing X509 SSL cert procedure, don't do this at home.");
            }
      } };

As mentioned, this is not highly recommended since is bypassing SSL handshake procedure, but it works if you know the server you're trying to connect is yours!

Regards,
Alex

Sorry for the late response.

I am not convinced of this solution. If you "know" that the server is yours and you want to skip verification, why use encryption at all? Why not configure the mail server to accept unencrypted connections from the local network?

Well, because I want my communications to be encrypted, even if I know I'm using my trusted user...that will avoid MITM attacks, or anyone using wireshark that could see everything in plain text...

Regarding your hack - where would we have to put this code? What is this?