Originally Posted by labra (Post 422495)

yes, it is self signed, but should there be something more special set to the certificate?

Originally Posted by physiemist (Post 422526)

Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!

Originally Posted by mikec (Post 422609)

did you see this post , might help

http://talk.maemo.org/showpost.php?p...6&postcount=98

Not sure the N900 deals with self signed certs.

If you have a symbian device using M4E currently working, you can check what your cert says under tools->settings->General->Security->certificate management->Trusted Sites.

My one shows both the trusted site and the root cert issuer.

Originally Posted by labra (Post 422704)

Yes, I saw the post but working like that does not help. Always the same error.

Originally Posted by twoboxen (Post 411652)

I got the calendar & contacts to sync with google, but really they're not "synced"... only the initial one worked. No updates to the calendar (even one a week old) showed up on the n900.

Originally Posted by physiemist (Post 422526)

Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!

Originally Posted by labra (Post 422732)

Hi!

Now I managed to solve this. I added the cert to the certificate store. By going though the /home/user/ directory I found out that these certificates are put to /home/user/.maemosec-certs/ssl-ca/ -directory. The /home/user/.activesync/certs/ -directory does not have any symlinks to there. I manually symlinked the imported certificate from the .maemosec-certs/ssl-ca/ -directory to the activesync's directory, and it works!

(though it shouldn't be this hard)...

BR, Lari