How add SSL-certificate to a symbian mobile phone? (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message

adale -> How add SSL-certificate to a symbian mobile phone? (21.May2006 5:58:48 PM)

Anyone knows? I have searched all day trying to find this out.  I need this to get ActiveSync with SSL to work.

Connecting to the Exchange server from the mobile phone's web browser using SSL the OMA virtual folder is working.



adale -> RE: How add SSL-certificate to a symbian mobile phone? (21.May2006 6:48:32 PM)

Actually, it is not working, it seems. Even though I can read mail, I get the following two messages:

1. This site has sent an untrusted certificate
2. Authenciation data will be sent as plain text. Continue?



Henrik Walther -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 8:39:10 AM)

Actually I haven't tried this on a Symbian phone, but can't you (like on a Windows based phone) copy the certificate (in .DER format) to the phone, then simply double-click on it via Explorer or a similar program on the phone?

If not you may want to contact the support dept. where you bought the phone.



adale -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 11:04:04 AM)

No, it didn't work. I tried that. The extension of the file is cert. I believe it is DER-format. I will call Nokia Support.



adale -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 11:23:46 AM)

Maybe you solved it. The certificate is not DER encoded. It is Base 64 encoded as you specified in your article "Enabling OWA 2003 using your own CA". I will try generating a new one soon.



adale -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 11:53:47 AM)

No, unfortunately, it made it worse. It now comes up as a questionmark on the phone. The Base 64 format came up with a certificate icon.

But maybe we should use a different certificate template. I see you are using the web-server templates as opposed to the default "Administrator". There are other choices, too.

What about the choice "Create and submit a request to this CA" instead of the second choice you chose?

I am waiting for Nokia to give me a answer, too.



adale -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 12:48:33 PM)


2. Keys and certificates created elsewhere can be imported into phone key store from a PKCS #12 file.If keys and certificates are imported into phone key store, they cannot be moved into another device. When user swaps the device, he/she can import the original PKCS #12 file, if he/she still has it, into new device, or ask for new PKCS #12 file from the party that created them in the first place.

Anyone knows how to make a PKCS #12 file to be imported into this phone? It seems that Microsoft does not support this format. MS supports #10 and #7, but not #12.



purekaine -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 2:56:17 PM)

I am not familiar with this phone, but if it is a windows mobile device you can use the tool provided at the link below to turn off certificate validation checking.  This is great to use with self signed certs or certs not inherently trusted by the windows mobile devices.

http://www.microsoft.com/downloads/details.aspx?familyid=D88753B8-8B3A-4F1D-8E94-530A67614DF1&displaylang=en



adale -> RE: How add SSL-certificate to a symbian mobile phone? (22.May2006 3:47:06 PM)

A Symbian Phone is not a Windows phone....But thanks anyway

Here is some more info on the phone:

Browser (supported content): OSS (Nokia HTML Browser) + XHTML 1.1 browser also supporting WML 1.3. SSL V 3.0 & TLS 1.0 and HTML 4.01

Note it says SSL V 3.0. Anyone knows how to create a certificate supporting these specs?



dlavely -> RE: How add SSL-certificate to a symbian mobile phone? (8.Aug.2006 1:39:06 PM)

Hi Adale.

Did you ever get this to work? I am trying to do exactly the same thing, use a Symbian-based phone/PDA to sync w/Exchange. I cannot figure out how to create a certificate with a .der extension. There is a ".DER encoding method" used in the certificate creation, but it comes out with a .cer extension , in fact we used that to create a certificate that works great with Windows Mobile 5.0. But I think the .der extension must be a different encoding, and I cannot find anywhere how to create one.

Thanks!
-Dan



Page: [1]