My mail provider recently updated their SSL certificate and now I'm getting errors in K9 mail when I try to test my server information:

java.lang.RuntimeException: java.lang.RuntimeException: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 (SHA-1))

Is this a problem with their certificate? It works fine in Thunderbird. Or is the problem with K9 mail?

  • It's hard to tell if it's a bug in K9 or Android's SSL handling itself, but it looks like it was reported and discussed on K9's issue tracker. The last comment references a GitHub pull request that doesn't appear to have been merged into the main codebase, though. The ticket's about a year old, so I don't know if it just got abandoned or what. – eldarerathis May 20 '13 at 13:26
  • I'm having trouble figuring out whether Dreamhost could solve this by fixing their SSL certificate. – Amanda May 20 '13 at 14:30
  • I'm not really sure either. The discussion seems to imply that the error is caused by certificate chains that have a self-signed cert in the middle of the chain, and OpenSSL is more tolerant of this than Android's SSL implementation (which might be why Thunderbird works). – eldarerathis May 20 '13 at 14:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.