maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Can N900 accept a self signed certificate? (https://talk.maemo.org/showthread.php?t=46920)

cjard 2010-03-09 13:28

Can N900 accept a self signed certificate?
 
A mail server I have to interact with can be found at https://mail.g-t-p.com
If I go there in any browser (like IE) i get a warning. I exported the certificate from IE to all supported formats and copied them to my N900 and opened them in file manager
I also opened the site in MicroB, got Details on it, clicked certificate

In all cases the result was the same. A popover window giving me certificate details but NO option to install it

As such, I'm really struggling getting MfE to work


What to do? Can the N900 be made to install that cert, or must I insist that a proper one is provided, signed by a root auth?

rash.m2k 2010-03-09 13:32

Re: Can N900 accept a self signed certificate?
 
click on 'Or you can add an exception'

Rob1n 2010-03-09 13:39

Re: Can N900 accept a self signed certificate?
 
Quote:

Originally Posted by cjard (Post 561169)
What to do? Can the N900 be made to install that cert, or must I insist that a proper one is provided, signed by a root auth?

The N900 certificate store used by MfE will only import CA certificates (these can be self-signed but require the CA flag set), so that one won't work.

tc_sap 2010-04-10 08:07

Re: Can N900 accept a self signed certificate?
 
Hi all,

I have some question which might go into same direction.

My configuration: Nokia N900 with Maemo 5 Version 3.2010.02-08.

My company has an exchange server which is available via

https://217.140.83.118/exchange (this is some link to physical server I guess).

Certificate there (you aswell should be able to download & install on PC & browser) cannot be stored in certificate manager as of N900.

For installing it, I tried several things (saving as *der, *cer, crt, *pem,...) nothing worked... I already checked with xterm in /etc/certs.... but not 100% familiar and left my hands off there ;-)

I also uploaded certificate to N900, opened with file manager but no "INSTALL" option there.

With N900 I always tried to set up mail functionality via settings ==> Mail for exchange.

I gave my correct email-adress, username, password & domain..
on next setup screen I gave 217.140.83.118/exchange in field server and checked secure connection which automatically sets port 443.

When I then click on next I get error message "Exchange server requires secure connection or account is disabled".

Now my questions:
Could certificate of server be wrong (self signed, not valid for URL mentioned above) ? What should I tell administrators of my company to do in detail with certificate if it is wrong. ?

If I need to do some symlinking with xterm (in case certificate is fine), how should that look like ? Please if possible give some detailed advice with proper example like:

ln .-s <source> <target>...


Thanks in advance for help & kind regards,
Oliver Meinecke

Venemo 2010-04-10 08:54

Re: Can N900 accept a self signed certificate?
 
There is a package in the app manager called microb-engine-common-ext which provides a certificate manager for MicroB. When importing a certificate, there are options for using it for email and other software.

tc_sap 2010-04-10 09:06

Re: Can N900 accept a self signed certificate?
 
Quote:

Originally Posted by Venemo (Post 603926)
There is a package in the app manager called microb-engine-common-ext which provides a certificate manager for MicroB. When importing a certificate, there are options for using it for email and other software.


I guess you mean microsoft app manager on exchange server ? on app manager N900 I cannot find that program

Rob1n 2010-04-10 13:17

Re: Can N900 accept a self signed certificate?
 
Quote:

Originally Posted by tc_sap (Post 603895)
Could certificate of server be wrong (self signed, not valid for URL mentioned above) ? What should I tell administrators of my company to do in detail with certificate if it is wrong. ?

It's not a CA certificate, so the N900 cannot import it. They'll either need to create a new self-signed certificate with the CA flag set, or use a certificate signed by another CA.

tc_sap 2010-04-10 18:41

Re: Can N900 accept a self signed certificate?
 
Quote:

Originally Posted by Rob1n (Post 604127)
It's not a CA certificate, so the N900 cannot import it. They'll either need to create a new self-signed certificate with the CA flag set, or use a certificate signed by another CA.

Ok, I will tell them and come back with feedback if it has worked.


All times are GMT. The time now is 09:28.

vBulletin® Version 3.8.8