[moneydance] moneydance-info Digest, Vol 68, Issue 9

[Steve Lessard]

I think the error is exactly what it says, a certificate chain  
problem. I'm guessing that your credit union doesn't the intermediate  
CA certificate properly installed.  I see this from time to time when  
using Safari and Firefox. It even shows up in Firefox on Windows too.  
(I haven't tried with Safari on Windows.) Unfortunately it does not  
show up when using Internet Explorer and for that reason alone most  
web sites refuse to fix the problem.

If you can figure out the address that Moneydance is connecting to  
when it gets this error then you should be able to use Safari to go to  
that same address and verify that Safari also reports an untrusted  
certificate chain. (In Safari you can even tell OSX to trust it  
anyways and that may be enough to make Moneydance happy.)





On Mar 11, 2009, at 3:50 PM, moneydance-info-request at moneydance.com  
wrote:

> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 11 Mar 2009 10:41:56 -0600
> From: Dave Wilson <dave at everydave.com>
> Subject: [moneydance] Untrusted Server Certificate Chain when
> 	downloading	from cu
> To: General discussion related to Moneydance
> 	<moneydance-info at moneydance.com>
> Message-ID: <F89237A6-819A-4111-809B-AE6869B5D71F at everydave.com>
> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
>
> 'morning all,
>
> Starting yesterday when downloading from my credit union (America
> First Credit Union), I received the following error:
>
> There was an error communicating with your financial institution.  The
> details of this error are below.
>
> A communication or parsing error occurred.  This could be the result
> of a network problem, a proxy error, or misconfigured server.
> Error Description: javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: Untrusted Server Certificate
> Chain
>
> Some googling brings me to think that it's one of three possible  
> things:
>
> 1. bad certificate from the credit union
> 2. updated certificate from credit union, for which MD needs to be
> updated
> 3. bad java version
>
> If it's 1, does anyone have any experience in dealing with their
> financial institutino about these matters?  Sadly, most don't know
> about Moneydance and won't give you a second look unless it's Quicken
> or Money.  In times past, I've simply told them I had quicken, but I
> don't think quicken would throw this kind of message.  If someone has
> some quicken based error messages I can give them, it'd be great.
>
> if it's 2, well then it's a matter of waiting for Sean and co. to do
> an update, what further information do you need?
>
> if it's 3, well, I'm stuck.  I'm on a 32 bit intel mac, and there have
> been no further java updates made available.  I supposed I could try
> one of the third party JVMs, but I'd like to avoid this option if
> possible.
>
> Anyone have any other thoughts?
>
> Thanks,
> Dave