|
2009-12-11
, 11:59
|
Posts: 42 |
Thanked: 27 times |
Joined on Dec 2009
@ Espoo, Finland
|
#392
|
Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!
The Following User Says Thank You to labra For This Useful Post: | ||
|
2009-12-11
, 13:03
|
Posts: 42 |
Thanked: 27 times |
Joined on Dec 2009
@ Espoo, Finland
|
#393
|
did you see this post , might help
http://talk.maemo.org/showpost.php?p...6&postcount=98
Not sure the N900 deals with self signed certs.
If you have a symbian device using M4E currently working, you can check what your cert says under tools->settings->General->Security->certificate management->Trusted Sites.
My one shows both the trusted site and the root cert issuer.
|
2009-12-11
, 13:27
|
Posts: 42 |
Thanked: 27 times |
Joined on Dec 2009
@ Espoo, Finland
|
#394
|
Yes, I saw the post but working like that does not help. Always the same error.
The Following 8 Users Say Thank You to labra For This Useful Post: | ||
|
2009-12-11
, 14:27
|
Guest |
Posts: n/a |
Thanked: 0 times |
Joined on
|
#395
|
I got the calendar & contacts to sync with google, but really they're not "synced"... only the initial one worked. No updates to the calendar (even one a week old) showed up on the n900.
|
2009-12-11
, 14:31
|
Posts: 23 |
Thanked: 5 times |
Joined on Dec 2009
@ Reston, VA
|
#396
|
Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!
|
2009-12-11
, 17:45
|
Posts: 36 |
Thanked: 20 times |
Joined on Nov 2009
@ Austin, TX
|
#397
|
|
2009-12-11
, 20:56
|
Guest |
Posts: n/a |
Thanked: 0 times |
Joined on
|
#398
|
|
2009-12-11
, 21:01
|
|
Posts: 1,366 |
Thanked: 1,185 times |
Joined on Jan 2006
|
#399
|
Hi!
Now I managed to solve this. I added the cert to the certificate store. By going though the /home/user/ directory I found out that these certificates are put to /home/user/.maemosec-certs/ssl-ca/ -directory. The /home/user/.activesync/certs/ -directory does not have any symlinks to there. I manually symlinked the imported certificate from the .maemosec-certs/ssl-ca/ -directory to the activesync's directory, and it works!
(though it shouldn't be this hard)...
BR, Lari
|
2009-12-11
, 21:19
|
Posts: 127 |
Thanked: 86 times |
Joined on Sep 2009
@ Hannover, Germany
|
#400
|
The Following User Says Thank You to schnebeck For This Useful Post: | ||
Tags |
activesync, certificate, email, exchange, fremantle, ignore tex14, maemo 5, mail for exchange, mfe, n900, provisioning, sync, thanks vitaly! |
Thread Tools | |
|
did you see this post , might help
http://talk.maemo.org/showpost.php?p...6&postcount=98
Not sure the N900 deals with self signed certs.
If you have a symbian device using M4E currently working, you can check what your cert says under tools->settings->General->Security->certificate management->Trusted Sites.
My one shows both the trusted site and the root cert issuer.