[Q] X.509 based web authentication, EAP/TLS, on Froyo / Gingerbread ? - General Questions and Answers

Does Froyo or Gingerbread support the importing of client X.509v3 certificates for the purpose of web authentication?
When so, how?
I can import my client certificate for regular VPN purposes is it usable for webbased authentication or 802.1x EAP/TLS?
The browsers I'm using is the default browser and Firefox, but none appear to be offering a link in their menus to view certificates or anything like that.
Many thanks
Grtz,

Bumping my question

Bumping my question

I guess its a hard question

I give up, i guess nobody knows.

Boraxx said:
Does Froyo or Gingerbread support the importing of client X.509v3 certificates for the purpose of web authentication?
When so, how?
I can import my client certificate for regular VPN purposes is it usable for webbased authentication or 802.1x EAP/TLS?
The browsers I'm using is the default browser and Firefox, but none appear to be offering a link in their menus to view certificates or anything like that.
Many thanks
Grtz,
Click to expand...
Click to collapse
I wish to know the exact same thing!
I want to access some online payment portal using my X.509 Certificate, but i can't seem to find any option to import my certificate and root certificate from the browser (tried opera/firefox/default browser), I imported the certificate using the "Settings --> location and security" but the browsers doesn't seem to be able to use it and login to the payment site fails.
My Mobile: Samsung Galaxy S2, Gingerbread 2.3.3

Related

custom X.509 SSL cert?

Hi,
Does anyone know where SSL certs live in the Android file system? I searched these forums and there doesn't seem to be anything about it yet.
I would like to add a signing cert so I can access my web server with SSL. I don't have a publicly signed cert, just a privately signed one, to save $.
Any help would be appreciated!
Thanks!
Sheepdawg
Further Details
Hi,
Did some more research. There are two ways around this. One is to add a custom SSL cert to your G1. I didn't get this to work, as it requires fiddling around with JRE apps. A link is here, however:
http://code.google.com/p/android/issues/detail?id=1016
The other way is to use another mail client. This one:
http://code.google.com/p/k9mail/
is a fork from the regular android mail client, and seems to work well. It fixes the SSL issue by allowing you to use improperly signed and self-signed certs.
Sheepdawg

Install SSL certificate

Hey guys
i'm using Roadsync to connect to my corporation's exchange server, However, they use a self-assigned SSL certificate
I get this error from roadsync which is similar when using other applications like nitrodesk or moxie
sync error: (-1001) not trusted server certificate
I know how to acquire my corporations ssl cert from the browser (.pem or .der). How do I import this into the Android though?
Thank you
Have the same question. I have read about Touchdown and K9 but I was hoping to avoid using another program.

[Q] Help with Exchange PLZ

Greetings all, first time post.
I have a customer that has the new ATT Captivate. I have tried to get his exchange account working to no avail.
For those who have set this up, what setting have you used? It seems like every smart phone is just a little different.
I have used
domainname\username
domainname.local\username
domainname\mailboxalias
for exchange server I have used the DNS names, IP address, with and without /exchange
With and without SSL
I keep getting authentication errors.
I have tried 2 different servers, 3 different accounts to no avail.
The user was using a blackberry before so I know it can connect.
What am I missing? The password is 4 digits.
i use the following
user: domain\username
server: owa address
flextechs said:
Greetings all, first time post.
I have a customer that has the new ATT Captivate. I have tried to get his exchange account working to no avail.
For those who have set this up, what setting have you used? It seems like every smart phone is just a little different.
I have used
domainname\username
domainname.local\username
domainname\mailboxalias
for exchange server I have used the DNS names, IP address, with and without /exchange
With and without SSL
I keep getting authentication errors.
I have tried 2 different servers, 3 different accounts to no avail.
The user was using a blackberry before so I know it can connect.
What am I missing? The password is 4 digits.
Click to expand...
Click to collapse
Just because it was working with a Blackberry doesn't mean he can Exchange SYnc.
The BB has 2 ways to connect: 1 BES (BB Enterprise Server) - only BB can connect and does all the encryption. The BES talks to Exchange. The BB phone talks to BES.
2. BIS (BB Internet Server) - this is a hack - it screen scrapes the Outlook Webmail.
Neither of these methods guarantees that the exchange admin allows EAS (Exchange Active Sync). Can the user login to the Webmail component? If so, have you tried the server webmail address?
Has the person even asked their Exchange admin if they support EAS?
99% of the time, authentication deny is because they are blocking EAS as many phones that support it, are not very secure. If they are a BB shop, this is not unusual.
alphadog00 said:
Just because it was working with a Blackberry doesn't mean he can Exchange SYnc.
The BB has 2 ways to connect: 1 BES (BB Enterprise Server) - only BB can connect and does all the encryption. The BES talks to Exchange. The BB phone talks to BES.
2. BIS (BB Internet Server) - this is a hack - it screen scrapes the Outlook Webmail.
Neither of these methods guarantees that the exchange admin allows EAS (Exchange Active Sync). Can the user login to the Webmail component? If so, have you tried the server webmail address?
Has the person even asked their Exchange admin if they support EAS?
99% of the time, authentication deny is because they are blocking EAS as many phones that support it, are not very secure. If they are a BB shop, this is not unusual.
Click to expand...
Click to collapse
I am the admin. He was using the att BB setup through the webpage that had where you put in the OWA information. This server is setup like all of my customers. I have other customers using windows mobile just fine. Deafult SBS 2003 Install. He is part of the Mobile User Group and all exchange features for this user are enabled. Reading MS Article ID: 817379
You can use Exchange only if you have owa available to the internet. It sounds like you do.
Do you have a direct url to your owa site? Do you have an ssl certificate? You should be able to use \[email protected] and just put your direct url as the server. If using ssl then select "accept all certificates."
Sent from my SAMSUNG-SGH-I897 using XDA App
domain\login
password
use mailserver.domain.com/exchange
NOT https: // mailserver.domain . com/exchange
use ssl
accept all certs
hope this helps (sorry, i'm not allowed to post links)
JimmyStale said:
domain\login
password
use mailserver.domain.com/exchange
NOT https: // mailserver.domain . com/exchange
use ssl
accept all certs
Click to expand...
Click to collapse
Just another confirmation that what JimmyStale (and others) wrote works fine:
DOMAIN\Username
Password
Server: OWAserver.domain.com (whatever your Outlook Web Access URL is)
- rp
For Exchange activesync you do not have to put the /exchange or /owa after the server name. It actually uses the OMA part of the default website on the server. I have a dns registration pointing to my external ip for Exchange and it works just by putting the domain\username and the dns name that points to your server.
I also have a hosted exchange account for my personal email on my personal phone (Captivate). It works without the /exchange as well.
It may just be an issue with the password being too short or something along those lines.
Also, if you plan to support Android 2.2 you will need a signed SSL certificate. I verified this with my work phone (Moto Droid) and it would not authenticate until I installed a signed certificate. Outlook 2007 also has this requirement.
naplesbill said:
For Exchange activesync you do not have to put the /exchange or /owa after the server name. It actually uses the OMA part of the default website on the server. I have a dns registration pointing to my external ip for Exchange and it works just by putting the domain\username and the dns name that points to your server.
I also have a hosted exchange account for my personal email on my personal phone (Captivate). It works without the /exchange as well.
It may just be an issue with the password being too short or something along those lines.
Also, if you plan to support Android 2.2 you will need a signed SSL certificate. I verified this with my work phone (Moto Droid) and it would not authenticate until I installed a signed certificate. Outlook 2007 also has this requirement.
Click to expand...
Click to collapse
The phone is a brand new ATT Captivate. From what I understand from the ATT Rep, this phone is brand new. It is running Android 2.1 according to ATT website. The user PW is 4 charaters, so I guess I can try that.
flextechs said:
The phone is a brand new ATT Captivate. From what I understand from the ATT Rep, this phone is brand new. It is running Android 2.1 according to ATT website. The user PW is 4 charaters, so I guess I can try that.
Click to expand...
Click to collapse
I just pointed out the info about 2.2 because the Captivate will be upgraded to 2.2 soon enough.
I would try a longer password and see if that works.
flextechs said:
I am the admin. He was using the att BB setup through the webpage that had where you put in the OWA information. This server is setup like all of my customers. I have other customers using windows mobile just fine. Deafult SBS 2003 Install. He is part of the Mobile User Group and all exchange features for this user are enabled. Reading MS Article ID: 817379
Click to expand...
Click to collapse
Are there other mobile users at this site using winmo? Check server logs for clues. It could a virtual directory permissions issue.
Sent from my SAMSUNG-SGH-I897 using XDA App
A fool I am
Ok. For those of you who know SBS 2003, I had to run the Internet Connection Wizard and turn on the Windows Mobile function. Friggin' duh. I thought it was on.
he used
domain\username
webmail.domain.com
with ssl and auto accept certificates.
Thanks all for who contributed to me finding myself at fault.
I can't beleive all the time wasted. Between the customer, the rep at ATT, and myself about 6 hours. Not including your reading and replies. DOH!

[Q] Is there a mail client where I can set a proxy?

I'm looking for a mail client (for android obviously) where I can set a proxy.
I need to use a proxy to connect to the company exchange server. I could set the the proxy for all of my internet traffic but I don't really care for the idea to route all my data through the company proxy.
Allready looked at K-9 and Kaiten but couldn't find any proxy settings.
"Enhanced Email" by Quantum Apps says it can run pop/imap mail service. Ask on their support forum if its proxies are configurable.
sent from xda premium on an Incredible S
Any update on this?
i'm looking for the exact same thing,
and with the search words 'proxy and android', even with other search words email,
you are drowned out, on google, with lots of irrelevant results...
so that, it took me a long time even to find this post.
I want to setup an email client to connect to my email server over Tor.
Much in the way that I can do that now on thunderbird, using Tor and torbirdy,
I will use Orbot on android....
Any ideas?
Maybe this will work with SandroProxy, app tab where you can redirect traffic just for one app and transparent proxy.
SandroProxy can then connect to other proxy. It's a little bit tricky but could work.
I'm developer of SandroProxy, Drony. There are also other proxies that can do the same.
svaens said:
i'm looking for the exact same thing,
and with the search words 'proxy and android', even with other search words email,
you are drowned out, on google, with lots of irrelevant results...
so that, it took me a long time even to find this post.
I want to setup an email client to connect to my email server over Tor.
Much in the way that I can do that now on thunderbird, using Tor and torbirdy,
I will use Orbot on android....
Any ideas?
Click to expand...
Click to collapse
I wonder if we have any app that natively support this.

[Q] Remembering Login Information in Internet Explorer

I'm tryng to get the Username to be remembered on internet sites that require log in. Is there a toggle for it in the settings?
Thanks
Hi
I've checked every corner and did not find what you're looking for. However there are alternatives to the stock Internet Explorer.
UC Browser is one such browser and has a few more features added compared to IE, it also has password and form auto-complete.
Cheers,
My webmail saves my username, but my bank doesn't.
It may have something to do with each login page's setup.
JJ
Every site I visit has the same behavior as PC Browser. Facebook, Hotmail, Google never ask me to inform password again. Can't understand exactly what you want.
Is it a Chrome/Firefox behavior your expected?

Categories

Resources