Develop Bugs

Disable Server Certificate

I've done some searching and one thread on this forum indicates it is not possible to Disable / Ignore Server Certificate checks.
While I have read that some roms have been cooked to do this?
Is there a hack or anything that I can apply to stop "server certificate is not valid" messages?
Thanks.

Lazarous said:
I've done some searching and one thread on this forum indicates it is not possible to Disable / Ignore Server Certificate checks.
While I have read that some roms have been cooked to do this?
Is there a hack or anything that I can apply to stop "server certificate is not valid" messages?
Thanks.
Click to expand...
Click to collapse
A little more information would be really great... Seriously, we know absolutely nothing about your device, ROM version, Exchange server version, etc...

Ah, I do apoligise, I thought it was generic and am fairly new to this!
I am running WM6 on a Vario MDA II.
The message happens when I try to connect to my internet provider to download POP mail.

Lazarous said:
The message happens when I try to connect to my internet provider to download POP mail.
Click to expand...
Click to collapse
So you've ticked the SSL required box on your pop settings for that account?
Does it need SSL? Try it unticked.

Yes. The SSL is ticked.
Without it, it does not work. With it, it works, I get the error -but- can continue.

So far I remember, it is possible to disable cert check (for WM5 at least). Someone posted the required reg tweak in the hermes forum a long time ago.
Good luck for finding it
The easiest way is still to add the CA to the trusted root

try this (worked on WM5),
http://winzenz.blogspot.com/2006/03/hacking-your-windows-mobile-50.html

Help with exchange server issue

well i'm having problems with my Att 8525. I need to find a way for me to be able to connect to the exchange server at my office on an https connection. We just upgraded our security cert and now this issue keeps coming up. Does any one know how to fix it. Here is the error code: 0X8501001

lino8419 said:
well i'm having problems with my Att 8525. I need to find a way for me to be able to connect to the exchange server at my office on an https connection. We just upgraded our security cert and now this issue keeps coming up. Does any one know how to fix it. Here is the error code: 0X8501001
Click to expand...
Click to collapse
What I had to do was delete the server from the 8525 and then re-enter them. The first time it syncs OTA it should have some on-screen commands with buttons for you to hit "verify security settings" and create password for the device. You might have to download a signed security thingamijigger to it though, a certificate or whatever for it.
Hope This Helps,
Jim

I'll give it a shot right now! thanks!

Well that didn't work? umm i tried re-flashing the rom and nothing. Does anyone know how to allow HTTPS on the phone or a way for me not to use port 80 but port 443? thanks!!

Exchange Problems! 0x800072F17

I really didn't want to post this, honest. I have searched xda. I have searched the web. I have found other threads. I have followed the suggestions. But, it seems that my exgirlfriend may have been right, I'm an idiot.
I can't get my Hermes to connect to my office exchange server. The settings on my end are correct, the issue is on my office's end.
When I sync I get an error and support code 0x80072F17. I know that it's a certificate error.
IT is not going to help me on this one, so I'm on my own. I have tried to manually import the certificate. Didn't work. I tried making a regedit I found on another thread. Didn't work. I tried combinations of various settings. I only time I don't get an error code is when my device begins to endlessly prompt me for my password.
I'm sorry to post, but it's my last option. Does anyone have any work arounds for this error? Is there a way to have my device ignore the certificates? Is there anyone out there that can help??

There must be some way. My colleagues, both of them with HTC Trinity's, original WM5 roms came across this error when the certificate on our Outlook Web Access was about to expire. Me, however, with my HTC TyTN WM6 never got this issue. I'm not sure why. I know I've installed a couple of cert cabs, the one they call sdkcerts.cab and one more. Search for that cab and see if it helps. I always figured it made the device accept non signed software but maybe it helps for these kinds of issues as well.

You just must set correct date and time for you phone and try again.

I'll try and give you a hand...
First off, you need to know a few things to set this up.
(1) The FQDN of you company used to access the OWA (Outlook Web Access), for example, mail.mycompany.com/exchange
(2) The NetBIOS name of your local domain at your office (Right click the My Computer icon on your office pc and select Computer Name and note the Domain. If your IT dept did it the recomended way it'll have a .local extension, for instance, lawoffice.local. You'll use just the domain name without the extension, ie: lawoffice. (without the period, LOL)
(3) I absolutely never use my PC to configure my ActiveSync on my devices, just to initailly copy the certificate to the Storage Card.
Two ways to do the certificate. First is the method I always used until I discovered the second method, which is in my sig.
(BTW, substitute YOUR FQDN for mine, duhh! )
(1) Install the certificate on your PC by going to the FQDN of your OWA in Internet Explorer 7 on your PC, not your PDA (XP is much easier, Vista is quite difficult to do this)
For example, open IE7 and put mail.mycompany.com/exchange in the address bar. You should initially get a "There is a problem with this website's security certificate" error, click on "Continue to this Website" Now, next to the address bar at the top you'll see Certificate Error", click it, View, Install, Next, Next, Finish, Yes. Then you'll see "The import was sucessful" <damn, that took a while!)
Close IE 7 completely and reopen it, put "mail.mydomain.com/exchange" in the address bar and you'll go straight to the OWA page, meaning that your import WAS sucessful, yipee!
(2) Click on Start, Run and type "mmc" and OK. This opens the Microsoft Management Console and you'll see Console1 at the top. File, Add/Remove Snap-In, Add, Certificates, Finish, Close, OK. Now expand Certificates, Trusted Root Certification Authorities, Certificates. Find YOUR certificate in the list. Right click, All Task, Export, Next, DER encoded binary, Next, File name. I use c:\mail.mydomain.com so that I can find it easily. Now finish and you'll get the Export was sucessful message.
(3) Connect to your PDA via ActiveSync as a guest, kill your partnership if it exists, you don't need it), copy the cert to your Storage Card and execute it from there.
Now disconnect youR PDA AND open ActiveSync. Server address is the FQDN of you company without the /exchange, for example, mail.mycompany.com. Leave the check mark on the SSL. Next put your user name, password and the NetBIOS name of your domain. The configure you options for the number of days to sync, etc.
That's it!
Now... once you do that and it works, follow this thread, Auto-provisioning POP3 or Exchange mail via UC Mini how-to.
so you can create a cab to do this automatically!

I had this problem before.
For me, it was due to the fact that I installed CESTAR and it messed up my certs. Unintalling CESTAR won't fix it. You got to reload the rom.
From there, I used Leies' Chinese character support which is free and doesn't mess up the certs.

SOLVED
I have been at this issue for over 2 days now, dealing with the error 0x800072f17. About 5 min ago i fixed it. After narrowing the problem down to a certificate error i then proceeded to look at the certificates. There were two in the certificate store (personal) and both were self signed.
One was XXXX (server name) and the other was XXXX(company name) CA.
The server name one had expired. Seeing as how it is self signed, i had our it admin renew it. He forgot to re-assign it to the outlook web access, so i did it myself in the Internet Information Services console on the server.
This had solved only 1/2 of the problem.
The certificate was assigned to the exchange server, not the OWA web site. After discovering that i could not change the issued to name, or create a new certificate (not an admin) i decided to change the activesync settings to sync the INTERNAL OWA address, which is servername.internaldomain.externaldomain.com (this had not previously worked due to the expired certificate)
Now i have a fully functioning push email system.
Nearly all done without admin permissions.
Whilst im new to this site, feel free to pm me about it.
Solving this is the most satisfying thing i have done this year lol.

But does this allow you to get/check email from outside your location? Or do you have to establish a VPN first?

Froyo and exchange

I've searched everywhere but cannot find a solution that works.
I've just got a HTC Desire but cannot get ActiveSync to work. No one other has a Desire with froyo so I cannot get any help here. (they do got iPhones or window phones, which all can sync)
I use the exact same settings as they do, however whatever I do I get "authentication failed", and I know that I user correct domain/user/pass.
I tried owa through the browser and that worked fine. I checked the certificate and that was valid. Any ideas?
We run exchange 2003

go check the exchange original certificate's host name.
This was the problem with my setup.
On 2.1 it didn't care, on 2.2 the domain(host name) must be identical to the actual certificate of the exchange.

yoxler said:
I've searched everywhere but cannot find a solution that works.
I've just got a HTC Desire but cannot get ActiveSync to work. No one other has a Desire with froyo so I cannot get any help here. (they do got iPhones or window phones, which all can sync)
I use the exact same settings as they do, however whatever I do I get "authentication failed", and I know that I user correct domain/user/pass.
I tried owa through the browser and that worked fine. I checked the certificate and that was valid. Any ideas?
We run exchange 2003
Click to expand...
Click to collapse
I'm going to assume you are running Froyo - as most exchange servers require remote wipe and unless your device meets the minimum security requirements it will not work.
Have you installed the certificate? (This may not be necessary as ActiveSync pulls the policies from the server)
Settings > Security > Install from SD Card
Froyo supports ".cer" certificates so you should not have a problem here.
Here is the main thing, in security you need to make sure you do the following:
Change screen lock - make sure you set a PIN password (MUST BE PIN!) If you have pattern password enabled you will not connect.
Lock phone after - this should be set to "Immediately"
After over a week of trying to get it working on my Desire changing to PIN password is what I had to do. Let me know if this works for you.
Failing this download the demo version of TouchDown from the android market and try to connect using the "Automatic" method - if it fails it should give you more details on what the actual problem is or you can always email NitroDesk who make the app for help.

Thanks will try!
tried and it did not help. I'll check with the retards managing our echange. My colleague tried with his user/pass and it worked straight away. there's something wrong with my user i guess.

There is a bug with certain configurations of Exchange 2003 where IIS will throw an error when you log in, if your password is set to expire within 14 days.
Try to log in with outlook web access and see you get "HTTP 401 Unauthorised".
If you do, and press F5 and see if it lets you in. If this happens then you just need to change your password and it should start working on your Desire.

Thanks for your answer st0kes, but it did not help. I can access OWA without any problem. I have tried to set a new password but that did not help either.

Exchange issue

Hi,
I have a question about exchange setup. Is a data plan with enterprise mandatory? or can we use it over wifi?
I am trying to setup my corporate exchange. I installed cerificates from email (after lot of searching) and initially it gave certificate error and i went my ie in laptop and pulled all certificates and installed. Now it just says 'there is a problem with the setup error code 85010004'. Please help.
I searched and could not find any more help anywhere.
Thanks & Regards,
Murty.

Maybe this is too simple, but you do need to reboot the phone after installing the certificates; have you tried that?
I have set up exchange activesync over wifi, and it works fine without a cellular plan.

Thanks for confirming for WiFi.i checked with exchange admin and they said I don't have access. I raised request and fingers crossed for now.