Thread: cacert on N950 in OpenMode and MfE
View Single Post
xelo is offline xelo
2016-01-19 , 18:49
Posts: 48 | Thanked: 191 times | Joined on Jan 2016 @ Münsterland, Germany
#1
Hey Community,

recently I discovered a N950 in my employers device archive.
Now I'd like to use this awesome device daily to replace my not so good WindowsPhone.

I've already been capable of bringing the N950 into Openmode.

I've got two Questions:

1) How to install custom CA's (cacert.org)
2) How to enable Mail for Exchange (Question might depend on Q1)


Ok, let's talk about more details:

I fail when trying to install new Root-Certificates (those of cacert.org)

When downloading and installing the certificate, I can see the certificate and it is added in the certificatemanager, but the /var/log/syslog says:

Code:
certificate_install: aegis_storage.cpp(1935): ERROR commit: access denied, cannot commit '/var/lib/aegis/ps/Ss/certman.ssl-ca'

I use cacert to secure my Mail, Calender and Contacts which are "hosted" with horde and can be accessed with ActiveSync.(Exchange)

Unfortunately I'm not able to connect to the "Exchange" Server with Mail-For-Exchange.
We could connect successfully with a N900 (with and without cacert certificates), Windows Phone and Android devices, so the server should not be the Problem.
MFE reports "Invalid host address for Mail for Exchange Server".

Code:
Jan 19 19:37:46 (2016) mfeplugin[2461]: [Debug] Connecting to URL:  "https://xxxxxxxxxxxxx:443/Microsoft-Server-ActiveSync"
Jan 19 19:37:46 (2016) icd2 0.213.4+0m8[1173]: Duplicate filter: Do not add filter for app :1.272
Jan 19 19:37:46 (2016) mfeplugin[2461]: [Debug] QNetworkReplyImpl::_q_startOperation was called more than once
Jan 19 19:37:47 (2016) wlancond[1009]: High signal
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error] CertManager: ssl error "The issuer certificate of a locally looked up certificate could not be found" : "The issuer certificate of a locally looked up certificate could not be found"
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error] Certificate info:
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error] Subject:  O= "CAcert Inc." CN= "CAcert Class 3 Root" L= "" OU= "http://www.CAcert.org" C= "" ST= ""
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error]  Issuer:  O= "Root CA" CN= "CA Cert Signing Authority" L= "" OU= "http://www.cacert.org" C= "" ST= ""
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error]   Valid: from "Mon May 23 17:48:02 2011" to "Thu May 20 17:48:02 2021"
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error]  Serial: 672138
Jan 19 19:37:49 (2016) mfeplugin[2461]: [Error] Version: 3
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Debug] User acceptance result for certificate "CAcert Class 3 Root" = 0
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Error] CertManager: server certificate "CAcert Class 3 Root" has been accepted by user
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Debug] CertManager: ssl error "The root CA certificate is not trusted for this purpose" : "The root CA certificate is not trusted for this purpose"
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Debug] CertManager: server certificate "CAcert Class 3 Root" has been already accepted by user
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Debug] void MfeCheckCredentialsDialog::onSendFinished(QNetworkReply*) replyError= 0 "Unknown error"
Jan 19 19:37:50 (2016) mfeplugin[2461]: [Debug] error( 0 )= 3

What I already tried:
  • Accepting the certificate when MfE asked me if I'd trust the cert
  • Adding root and class3 cert to /var/lib/aegis/certs/common-ca/ and to /var/lib/aegis/certs/user/*-ca
  • rehashing of /var/lib/aegis/certs/common-ca/ with c_rehash as suggested in http://talk.maemo.org/showthread.php?t=94484

But, as of now: no success


Do you have any ideas how to get this working?

Best Regards
xelo

=========
Solution:

Certificates:
1. Additional certificates can be Installed with
Code:
acmcli -c common-ca -a  sha1HashOfPemEncodedCertificate.pem
This installs the certificate to
Code:
/var/lib/aegis/certs/common-ca/
2. In order to use this command, the device needs to use Inception and starts the command above using ariadne or it is runnig in OpenMode (See the mentioned Readme) and the developer shell is running with elevated rights
If neither develsh was elevated nor the device uses inception and ariadne, you will receive a
Code:
permission denied
MfE:

Not found yet (2016-01-24)
Last edited by xelo; 2016-01-24 at 16:23. Reason: Added partial solution to first Post
 

The Following User Says Thank You to xelo For This Useful Post: