Active Topics
-
The N900 is now 15 years old! (9)
to Nokia N900 by Arno_11 - 5 hrs, 55 mins ago -
Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (4)
to SailfishOS by Maemish - 5 days, 18 hrs ago - more...
|
2009-12-14
, 22:11
|
|
Posts: 79 |
Thanked: 42 times |
Joined on Dec 2009
@ London
|
#2
|
brilliant, thank you so Lars!
I followed your clear instructions and that solved my issue with secure IMAP email. For those who may wonder how these certificates look like, here's an abbriged version of what I used:
(my ISP provided that). I simply saved that in a file called myserver.p12 and loaded it with the filemanager as suggested above & I was away! 
I followed your clear instructions and that solved my issue with secure IMAP email. For those who may wonder how these certificates look like, here's an abbriged version of what I used:
Code:
-----BEGIN CERTIFICATE----- MIIDtzCCAyCgAwIBAgIEMcxcNDANBgkqhkiG9w0BAQQFADCBnTELMAkGA1UEBhMC ... sN2QPXGZNzibjwRFnAo9PXKMfb/CPVOBFe6V/eBtSkGsmobqeTs1Y4pyYB+tOPR8 JcqE5HZk/9gcLcwgKYIFE2Ypa5R3/jKirHTXOiLiZdquu9PBN2VOKdgH3w== -----END CERTIFICATE-----
| The Following User Says Thank You to sxc For This Useful Post: | ||
|
|
2009-12-15
, 01:54
|
|
Posts: 5 |
Thanked: 4 times |
Joined on Dec 2009
@ London
|
#3
|
Unfortunately I still have trouble with IMAP over SSL and using a client certificate. It works fine with accessing my company's Web sites using my client certificate, but accessing my work email still fails. 
After configuring the account it just takes a few seconds until I get the error message that either the host name or port is wrong. Which isn't the case.
After configuring the account it just takes a few seconds until I get the error message that either the host name or port is wrong. Which isn't the case.
| The Following User Says Thank You to Lars For This Useful Post: | ||
|
|
2009-12-15
, 22:05
|
|
Posts: 79 |
Thanked: 42 times |
Joined on Dec 2009
@ London
|
#4
|
Sorry to hear that Lars. Could it be that you have a firewall issue - do you have any other device you can try this with (eg: an iPhone)?
 |
|
2009-12-19
, 21:41
|
|
Posts: 21 |
Thanked: 12 times |
Joined on Aug 2009
@ Finland
|
#5
|
As a CAcert user I need to install CAcert's root and class3 sertificates to all devices I use. I tried to install sertificates to N900 like I had used to do with S60 phones, as it appears N900's browser goes mad when I pressed hyperlink to .cert or .der file.
From the above I realized that filemanager might be the thing as Cert manager just happily shows what you got and browser does nothing clever. It looks like filemanager supports both PEM and DER formats of certs and installs them without much of a strugle.
I think that settnigs Certificate manager is misleading, as it really does nothing of management, but it's very good that certificates can be installed through file manager
From the above I realized that filemanager might be the thing as Cert manager just happily shows what you got and browser does nothing clever. It looks like filemanager supports both PEM and DER formats of certs and installs them without much of a strugle.
I think that settnigs Certificate manager is misleading, as it really does nothing of management, but it's very good that certificates can be installed through file manager
__________________
If you were to battle an old Sith Lord in a lightsabre duel, you would find that we're only children playing with toys.
If you were to battle an old Sith Lord in a lightsabre duel, you would find that we're only children playing with toys.
|
|
2010-01-02
, 17:25
|
|
Posts: 11 |
Thanked: 0 times |
Joined on Dec 2009
@ England, UK
|
#6
|
I am trying to install the attached SSL certificate, but it won't install, just displays its details. What's wrong?
I exported the certificate, from the website, as a DER file using my Firefox browser then used scp to copy it to my N900.
I clicked on it in the N900's File Manger and selected the Certificate Manager application, then it just displays the certificate details, with no option to install it.
I tried exactly the same steps with another certificate and it all worked as expected and gave me an install button.
Is it something wrong with the DER file (attached) or my N900?
I exported the certificate, from the website, as a DER file using my Firefox browser then used scp to copy it to my N900.
I clicked on it in the N900's File Manger and selected the Certificate Manager application, then it just displays the certificate details, with no option to install it.
I tried exactly the same steps with another certificate and it all worked as expected and gave me an install button.
Is it something wrong with the DER file (attached) or my N900?
|
|
2010-01-02
, 17:32
|
|
Posts: 543 |
Thanked: 181 times |
Joined on Aug 2009
@ Universe,LocalCluster.MilkyWay.Sol.Earth.Europe.Slovenia.Ljubljana
|
#7
|
Might need to be a PEM file.
__________________
For any repos or anything else I might have working on my N900 see:
http://wiki.maemo.org/User:Ruskie
A quick list of what I have in the repos
zsh|xmms2|fcron|gtar|gcoreutils
For any repos or anything else I might have working on my N900 see:
http://wiki.maemo.org/User:Ruskie
A quick list of what I have in the repos
zsh|xmms2|fcron|gtar|gcoreutils
| The Following User Says Thank You to ruskie For This Useful Post: | ||
|
|
2010-01-02
, 18:35
|
|
Posts: 11 |
Thanked: 0 times |
Joined on Dec 2009
@ England, UK
|
#8
|
Its a DER file.
DER file works with the other site I tried.
Just tried it as a PEM file with chain and the same thing happens.
It just displays the details, no install button. But the PEM file for the other site I tried before also works... weird.
PEM file attached, if anyone wants to have a go and see if its just my N900.
Last edited by altomkins; 2010-01-02 at 18:41.
DER file works with the other site I tried.
Just tried it as a PEM file with chain and the same thing happens.
It just displays the details, no install button. But the PEM file for the other site I tried before also works... weird.
PEM file attached, if anyone wants to have a go and see if its just my N900.
Last edited by altomkins; 2010-01-02 at 18:41.
|
|
2010-01-03
, 20:38
|
|
Posts: 11 |
Thanked: 0 times |
Joined on Dec 2009
@ England, UK
|
#9
|
From the excellent Mail For Exchange (MfE) Heartbeat and FAQ;
"Keep in mind - self-signed certificate shall have "CA" field. Otherwise, N900 certificate manager will not allow to install it."
I guess my certificate has no CA (or a CA from an untrusted authority) and so it won't install and thus doesn't appear in the Certificates Manager... nothing I can do about it.
-------------------------
After I moaned my company bought an SSL certificate and it all works wonderfully and was so easy to set up.
Last edited by altomkins; 2010-01-06 at 14:42.
"Keep in mind - self-signed certificate shall have "CA" field. Otherwise, N900 certificate manager will not allow to install it."
I guess my certificate has no CA (or a CA from an untrusted authority) and so it won't install and thus doesn't appear in the Certificates Manager... nothing I can do about it.
-------------------------
After I moaned my company bought an SSL certificate and it all works wonderfully and was so easy to set up.
Last edited by altomkins; 2010-01-06 at 14:42.
|
|
2010-04-01
, 12:31
|
|
Posts: 1 |
Thanked: 0 times |
Joined on Apr 2010
|
#10
|
I use CACert.org for my internal servers as well and was getting a BAD Signature error when sending via secure SMTP.
To fix the problem I simply installed the CACert root certificate on my N900 by downloading the Class 1 PKI Key in DER format from CACert.org by selecting "Save as" in MicroB and then opening it with file manager which prompted me to install it and gave me the options for it's use i.e. server, WLAN, or email ( I selected all three ).
Tested it by sending an email which went no problems without prompting about the certificates "BAD Signature".
Hope this info helps.
Cheers,
w0rkRB
To fix the problem I simply installed the CACert root certificate on my N900 by downloading the Class 1 PKI Key in DER format from CACert.org by selecting "Save as" in MicroB and then opening it with file manager which prompted me to install it and gave me the options for it's use i.e. server, WLAN, or email ( I selected all three ).
Tested it by sending an email which went no problems without prompting about the certificates "BAD Signature".
Hope this info helps.
Cheers,
w0rkRB
It took me a while to figure out how to import an X.509/SSL client certificate which is actually quite easy (I didn't find anything about this in the user guide). So I'm writing this in case other people have the same issue.
The client certificate and key should then be available (the same works for server certificates as well). You may need to restart an active browser or email application for the new certificate/key to be available.
The Certificate Manager application should now display your imported certificates.
Vote for the following bug to get the missing features added to the Certificate Manager:
https://bugs.maemo.org/show_bug.cgi?id=6738
cheers...
Lars