Archive for June 3rd, 2006
Saturday, June 3rd, 2006
http://www.larryflynt.com/notebook.php?id=163
i would normally find this guy a scumbag, but this was an interesting read.
Saturday, June 3rd, 2006
d’oh
i strive:
to be a mentor, i kinda want to be a teacher.
to lose weight, but who doesn’t.
to get outdoors, go on trips.
to not waste my life in front of this computer screen.
to find someone that understand me, and accepts it.
to be more versed in movies, politics, and music.
to find some sort of financial stability, away from credit cards and paypal.
Saturday, June 3rd, 2006
Microsoft Mobile and SSL
If you’re planning on using exchange with smarphones and implimenting SSL, check this first. I ran into this problem at my office AFTER we had purchased a geotrust certificate. Here is the situation, currently we have 5 windows mobile 2003 devices that are from cingular. I setup mine, and my co-worker was setting up his to do AUTD.
For those that don’t know what AUTD is, it maintains a connection to the exchange server when new items arrive via SMS messages, as a new email comes in, your phone is sent a text message telling it to connect to the server and download the new message. You never see the text message on the phone, its just a simple sms message (be warned, if your plan doesnt include text messaging you will be charged for it!).
After putting in our mobile addresses (cingular is 10 digit number@cingularME.com and verizon is 10digitnumber@vtext.com, fyi) there is an option to use SSL or not. We both chose SSL since its a secured connection that is signed by both parties. Ie my phone and exchange server know exactly who their talking to when downloading/sending emails. We both got INTERNET_45 errors, explained “INTERNET_45 (ERROR_INTERNET_INVALID_CA): Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.” Yea yea, okay so what the hell.. its a valid cert right? WRONG, mobile 2003 and 2002 only support these following certs
- Verisign Class 1 Public Primary CA
- Verisign Class 2 Public Primary CA
- Verisign Class 3 Public Primary CA
- Verisign Class 3 Public Primary CA (2028)
- GTE Cybertrust ROOT
- GTE Cybertrust Solutions ROOT
- Thawte Server CA
- Thawte Premium Server CA
- Entrust.net Secure Server
- Entrust.net CA (2048 bit)
You can however get by this, grab the cd you got with your mobile device and browse to support/tools/disable SSL/ and copy the as_cert_off.cab file onto your mobile device, run that and you should be able to accept any SSL certs.
NOTE: THIS DOES NOT WORK ON MOBILE 5.0 SO DONT TRY IT!
Alternatively, there is this option. That disables Cert Checking on the exchange server itself.
But this will mess with mobile 5.0 as well, the moral of this story… ditch all mobile 2002 and 2003 devices and just go 5.0, or dont use SSL