If you cannot change the server certificate (e.g., connecting to a legacy machine), you must tell the client to ignore the error.