While OpenSRS finalizes the migration of Hosted Email servers on Cluster A, some users connecting through email clients may see SSL connection errors. Webmail access is not affected. This article explains the impact, the mitigation options, and the migration timeline.
What's happening
Due to the ongoing migration of Hosted Email servers on Cluster A, a small percentage of users may experience SSL connection errors when their email clients connect to OpenSRS IMAP servers. Users who access mail through webmail are not impacted.
Who is affected
Users most likely to see warnings are those connecting on Cluster A using a non-standard hostname that is not covered by the OpenSRS white label process.
Affected clients may display warnings such as:
- "Cannot verify server identity"
- "The server you are connected to is using a security certificate that cannot be verified"
These messages can appear in Thunderbird, Apple Mail, Spark, Outlook, and similar clients.
How to mitigate
Impacted users can resolve the warning in one of three ways:
- Permit the exception when the client prompts.
- Update connection settings to a custom secured address. See White-labeled secured address.
- Switch to a default OpenSRS address, such as mail.hostedemail.com or mail.emailhome.com. See Email Client Configuration Guide.
The warning can also appear when a device is running outdated software that is missing current root certificates. Links to up-to-date root certificate lists for Apple and Android devices are in the External resources section below.
Tip: Recommend that customers use the secured address (mail.hostedemail.com, mail.emailhome.com, or your white-label address) as part of normal email client setup. This is the cleanest way to avoid certificate warnings altogether.
OpenSRS is actively mitigating these errors and notifying affected resellers directly.
Migration timeline
The schedule for the third phase of Cluster A email migration:
Date | Application or component | Details | Status |
|---|---|---|---|
Jan 12 – Mar 15 | Finalize IMAP migration | Accessibility to Webmail / IMAP / POP, minimal impact | Delayed |
Jan 12 – Jan 30 | Finalize metadata migration | User metadata, no impact expected | Complete |
Jan 12 – Feb 15 | Finalize data migration | User mail-store data, no impact expected | In progress |
Jan 12 – Mar 15 | Finalize custom environment migrations | Migrating to new load balancer, minimal impact | Delayed: vendor issue |
Jan 12 – Feb 28 | Managing new outbound relays | Outbound email sending; minor deliverability issues as external vendors update records | In progress |
Feb 1 – Feb 28 | Preparing for decommissioning | Legacy hardware, no impact expected | In progress |
External resources
- Available trusted root certificates for Apple operating systems
- DigiCert's official list of trusted root certificates on Android
Related articles
- Migrate to the OpenSRS Email Service — the full migration playbook.
- How to Use the Email Migration Tool — mechanics of running migration jobs.
- Email Client Configuration Guide — recommended client setup and secured addresses.
Questions? Contact OpenSRS Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.