Opera Mail complains about security certificates

hucker

hucker

Opera Mail complains about security certificates for anything with web images in the email - eg. from Ebay about an order. It never used to do this. It started after I reinstalled windows and simply copied the Opera Mail folder to where it was. Is something missing? Do I need to install it? If I accept the certificate, it doesn't ask me next time, but the window pops up briefly which is very annoying, as there's often about 5 warnings per message.

I have now installed it, but it's still not working.

leocg

leocg Moderator Volunteer @hucker

@hucker I guess it's kinda expected for a software that hasn't been updated in the last twelve years.

hucker

hucker @leocg

@leocg No, it isn't. Since it worked before my windows reinstall.

And since it's the only email client I've ever found with filtering on body, and I don't wish to learn a new one anyway, why would I stop using it?

I have a feeling it's a setting somewhere, perhaps a secret one in a config file. Burnout probably told me how to do it, he is an expert on mail. Is he still around?

sgunhouse

sgunhouse Moderator Volunteer @hucker

@hucker Which version do you have exactly? The final update had a build number (the last number in the complere version number) of 1044. If you don't have that version you'll need to go to the archives and find it.

burnout426

burnout426 Volunteer

When a cert dialog pops up, you can switch to the "Security" tab in it, check "Remember my choice for this certificate" and click "Approve". Is that what you've done already?

hucker

hucker @sgunhouse

@sgunhouse said in Opera Mail complains about security certificates:

@hucker Which version do you have exactly? The final update had a build number (the last number in the complere version number) of 1044. If you don't have that version you'll need to go to the archives and find it.

It's 1044.

hucker

hucker @burnout426

@burnout426 said in Opera Mail complains about security certificates:

When a cert dialog pops up, you can switch to the "Security" tab in it, check "Remember my choice for this certificate" and click "Approve". Is that what you've done already?

I didn't notice the security tab. I only clicked approve, which did remember it, but flashed the dialog up briefly for very instance in each email, about 5 with Ebay.

I just tried what you said, but the same thing happened. I never used to have them flash up. I thought I'd found a way to ignore all certificate problems.

Or..... what certificates does it use? It's obviously not using my up to date windows ones - can I update the ones it's using?

burnout426

burnout426 Volunteer @hucker

@hucker Hmm, I tested Opera Mail 1044 with my Vivaldi mail account. I got just one cert pop-up (for the mail server), went to the security tab, checked the box and approved it. Not getting any flashes of cert dialogs after restarting Opera Mail. Not getting anything for ebay or anything like that either.

Opera Mail has a built-in certificate manager. Unfortunately there's no way to load it in the standalone Opera Mail client (not even if you use the Manage certificates command tied to ctrl / for example). If you could, maybe there's something you could do there (import a cert or something). If you temporarily install Opera 12, you can goto "Advanced -> Security -> Manage Certificates" in settings to see what the dialog looks like at least.

You can try having:

[Security Prefs]
Enable TLS v1.0=0
Certificate revocation lists for ssl=0
OCSP Validate Certificates=0

in your operaprefs.ini, but not sure it that will help with the flashes.

hucker

hucker @burnout426

@burnout426 Opera Mail was never like this until I reinstalled Windows. Everything was kept by copying "c:\users\peter\appdata\local\opera mail", except the password for the mail server. There must have been something stored elsewhere, perhaps including the setting for certificates, or the certificates themselves.

Can I have done anything to it by clicking approve without ticking the box? Have I got them on semi approval or something? Unfortunately they flash up so fast I can't change them. Can I reset it?

I don't have an operaprefs.ini, only an operaprefs_default.ini, both in c:\users\peter\appdata\local\opera mail, and in c:\program files (x86)\opera mail - neither has the above entries.

Can I install Opera 12 without screwing up the current Opera One? Or should I do it on another computer (I have 8)? I assume that's the latest combined browser/mail version - would it create a prefs file with something I could copy over?

burnout426

burnout426 Volunteer @hucker

@hucker In "C:\Users\yourusername\AppData\Opera Mail" (if I remember correctly) is where operaprefs.ini is at.

That's also where the crt.dat files and trust.dat files are at. You should be able to delete optrust.dat to get the dialogs again to start approving from scratch. Not sure if it will help though.

You can install Opera 12 without interfering with Opera Mail. There's a choice in the Opera 12 installer to even make a standalone installation so you can just install it to a folder on your desktop. data will be in the "profile" folder in that folder on your desktop. Would be best to do the standalone installation so it doesn't make changes to the registry.

hucker

hucker @burnout426

@burnout426 Thanks burnout, I finally fixed it.

I deleted optrust.dat, and inserted

[Security Prefs]
Enable TLS v1.0=0
Certificate revocation lists for ssl=0
OCSP Validate Certificates=0

into operaprefs.ini

The problem was I couldn't find the files. It's the overly complicated way Windows stores files. I was looking in c:\users\peter\appdata\LOCAL\opera mail instead of c:\users\peter\appdata\ROAMING\opera mail, I didn't know it used both folders, most applications stick to one. I get why windows does it, different people can have different programs installed, your data can be seen on several computers if you log into a domain, it just makes it hard to find stuff!

I should of done this in the first place - searched the whole C: drive for the files.

I used "Search Everything" freeware, as windows search is infamous for just not finding stuff, even if it's sat right in front of you in the very folder you're searching in!

It's not taken the dialog away, but now once I've ticked the box and said approve for one server, eg Opera forums, Freecycle, Ebay, it never asks again and doesn't flash up. But every time I get an email form someone else containing images, I have to approve each one.

What was it you were suggesting I achieve with Opera 12?

burnout426

burnout426 Volunteer @hucker

@hucker said in Opera Mail complains about security certificates:

But every time I get an email form someone else containing images, I have to approve each one.

Ah, I see. They're remote images coming from a domain you haven't approved yet. I'm not sure how to fix that so they're automatically approved.

What was it you were suggesting I achieve with Opera 12?

It was to check the certificate manager dialog in the security settings and perhaps install some certs or at least check the approved certs. However, I don't think that's going to help with new domains encountered by loading of remote images. You would just have to build up the approve list over time like in Opera Mail.

If anyone would know if there's a workaround for Opera Mail (at least in Opera 12) to just automatically disable all cert warnings from the get-go, it would be Yngve.

https://yngve.vivaldi.net/

https://forum.vivaldi.net/user/yngve

Not sure if he will remember and help though.

hucker

hucker @burnout426

@burnout426 said in Opera Mail complains about security certificates:

@hucker said in Opera Mail complains about security certificates:

But every time I get an email form someone else containing images, I have to approve each one.

Ah, I see. They're remote images coming from a domain you haven't approved yet. I'm not sure how to fix that so they're automatically approved.

Before I reinstalled, I never saw that dialog box. There must be a way to disable it.

If anyone would know if there's a workaround for Opera Mail (at least in Opera 12) to just automatically disable all cert warnings from the get-go, it would be Yngve.

https://yngve.vivaldi.net/

https://forum.vivaldi.net/user/yngve

Not sure if he will remember and help though.

I would ask, but I can't find a way to send a PM there. (I created an account).

burnout426

burnout426 Volunteer @hucker

@hucker said in Opera Mail complains about security certificates:

Before I reinstalled, I never saw that dialog box. There must be a way to disable it.

You can play with one of your accounts in Opera Mail in Opera 12 to see if you can figure out something there first. If it's a pop account though, make sure not to uncheck "leave messages on the server". If it's an IMAP account, make sure to disable "mark messages as read after..." (unless you want it on).

Maybe something changed recently with servers that Opera no longer supports and it happening after a reinstall was just coincidence.

I would ask, but I can't find a way to send a PM there.

Ah, he has his PMs disabled it seems.

You might be able to post a thread in https://forum.vivaldi.net/category/8/security-privacy and @user him.

burnout426

burnout426 Volunteer

Just to show you:

In Opera 12, you can goto "Menu -> Mail and Chat accounts -> Import Mail -> Import Generic Mbox" and choose to import:

remoteimagecerttest.mbs:

From 
From: from@example.com
To: to@example.com
Subject: Remote Image Cert Test
Content-type: text/html; charset="utf-8">
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8">
        <title>Remote Image Cert Test</title>
    </head>
    <body>
        <p><img src="https://cdn.arstechnica.net/wp-content/uploads/2025/05/rx-9060-xt-slide-1440x806.jpg"></p>
    </body>
</html>

into a new account. Then, when you load the message and choose to load images for it, you'll be asked to approve the cert. You can then switch to the "Security" tab and approve it.

Then, hit alt + p, switch to "Advanced -> Security", click "Manage Certificates" and switch to the "Approved" tab to see that cert.

The standalone Opera Mail works the same way. It just doesn't have that "Manage Certificates" dialog.

With that said, not sure what type (if any) cert you can import to automatically approve all certs from all domains whether there are cert errors or not.

hucker

hucker @burnout426

@burnout426 said in Opera Mail complains about security certificates:

@hucker said in Opera Mail complains about security certificates:

Before I reinstalled, I never saw that dialog box. There must be a way to disable it.

You can play with one of your accounts in Opera Mail in Opera 12 to see if you can figure out something there first. If it's a pop account though, make sure not to uncheck "leave messages on the server". If it's an IMAP account, make sure to disable "mark messages as read after..." (unless you want it on).

Maybe something changed recently with servers that Opera no longer supports and it happening after a reinstall was just coincidence.

I would ask, but I can't find a way to send a PM there.

Ah, he has his PMs disabled it seems.

You might be able to post a thread in https://forum.vivaldi.net/category/8/security-privacy and @user him.

I have done so. https://forum.vivaldi.net/topic/108531/opera-mail-for-yngve

janz1

janz1

I had the same problem with certificates as you describe.
I had backup of my old computer and when I copied all files from \AppData\Roaming\Opera Mail\Opera Mail\ it fixed it. But Im not able to tell which file or setting does that.

hucker

hucker @janz1

@janz1 I definitely changed an entry in an ini file a long time ago to stop these dialogs. Presumably c:/users/peter/appdata/roaming/opera mail/opera mail/operaprefs.ini.

Anyone know what all those entries mean?

What about "Suppress External Embeds=0"

Nope, not that one. And I'm getting the question again on the same email if I tick to remember and approve it, then restart Opera Mail, it comes back