E-mail accept all certificates - Nexus S General

Has anyone managed to use the "TLS (Accept all certificates)" option in the default e-mail client on Nexus S? I have my own IMAP server with a self-signed certificate. If I select just TLS an java.security.cert.CertPathValidatorException which is expected since the certificate is self-signed. But if I then instead select the "TLS (Accept all certificates)" option the e-mail application crashes with the following error:
Sorry!
The application Email (process com.google.android.email) has stopped unexpectedly. Please try again.
Is anyone else using this feature and managed to get it to work? Want to know if it is just me or if it is a common error.
As a note I can use K-9 mail and it works fine. I can add an exception for my self-signed certificate in K-9 mail without problems.

Related

messaging: set imap root folder?

Hello,
I'm having a stupid issue with the Messaging application. My mailserver is an IMAP server, but the root folder for emails is "~/mail/". The application however doesn't allow my to set the server mail folder. Is there a registry entry for this?
Currently, it hangs on the send/receive action...
For a different mail server (where the mailroot has the default value), the messaging client works ok (with VPN, etc.).
edit: I can circumvent the folder issue as the server still supports POP3, but I would like IMAP to access additional folders...
I tried using QMail, but ran into a lot of issues, causing me to give up on it. The last issue is that it downloads the mail headers, but never the mail bodies (if I choose a mail, it just ignores my choice and refreshes the folder). It also doesn't keep the VPN connection (which I need when I connect to the server over WIFI) alive; after one minute the VPN connection is closed and QMail says it lost connection (actually, it says nothing, it just doesn't do anything anymore).
Thanks!
Jörg

Lost my Push Email

Can anyone suggest what I should look at to solve this?
Running HTC standard WM 6.0 -- CommMgr says that DirectPush is "on" but the only way I can get my MS Exchange email is to manually click "send/receive" for this account. I have 5 other email accounts all of which download per my settings, but MS Exchange does not? I'm baffled as to where to look to correct this.
Thanks!
did you open ActiveSync (A.S.) on your phone to see if there are any error messages? also, while in A.S., you should confirm that the sync "Schedule" has not changed to manual... and lastly, check with your Exchange Admin to confirm no changes occurred on the server side.
I once experienced that the SSL sertificate that was used to secure the communication with the server had expired on date. This caused push to stop working. There was a remark about this when I opened ActiveSync.
pananza said:
I once experienced that the SSL sertificate that was used to secure the communication with the server had expired on date. This caused push to stop working. There was a remark about this when I opened ActiveSync.
Click to expand...
Click to collapse
Where did you find a replacement certificate? I've had that msg but was unable to figure out where to find the updated certificate. Thanks.
brucewilsonpa said:
Where did you find a replacement certificate? I've had that msg but was unable to figure out where to find the updated certificate. Thanks.
Click to expand...
Click to collapse
You need to have your exchange administrator install a new and valid certificate. Not much you can do. If your exchange server is using a self-issued SSL sertificate you can use the Enroll Certificate function in Active Sync on your PC to install the issuer (most often domain controller) as a trustet root certificate.
brucewilsonpa said:
Where did you find a replacement certificate? I've had that msg but was unable to figure out where to find the updated certificate. Thanks.
Click to expand...
Click to collapse
if your company uses OWA, e.g., Outlook Web Access, you should be able to export the certificate from IE. I've done this before; the trick is to know which certificate is used to authenticate your access to the email server.

[Q] SMTP send fails via stock Email app

I was trying to add an IMAP/SMTP account to my Xoom using the stock Android Email app.
The IMAP connection works fine, however when I configure the SMTP server, I receive the following error: Error 550 Invalid Helo
This error occurs with SSL or TLS (one or the other is required).
According to the server admin, the error message on his end is as follows:
2011-03-14 10:27:10 H=173-130-xxx-xxx.pools.spcsdns.net (192.168.x.xxx) [173.130.xxx.xxx] rejected EHLO or HELO 192.168.x.xxx: invalid HELO
Click to expand...
Click to collapse
I can send via the HTC Mail app on my EVO with the same settings... so I'm guessing this is a bug with the Honeycomb "Email"?
Is there any known work around for this, or do I just need to find another client. Searching yielded little of help.
Appreciate it.

Exchange Authentication Failed

Hi guys,
I am trying to sync to 2 exchange accounts using the default mail client, but one of them is not working. It is complaining regarding authentication. The password I am using is correct but I am not having much luck.
I have tried some other email clients, it works with some and not with others.
Any ideas?
Hello. Same happened to me when I was trying to set up my company account.
Eventually I found out that there were some security checks on exchange server which were making my authentication failed. (Despite correct domain, username and password).
My company requires all employee's phones to be allowed on exchnage server in order to connect to it.
All I wanted is to have my calendar synced (no emails) and I managed to solve that by installing Google Calendar Sync on my comp. laptot (Syncing exchange calendar with gmail -> syncing with SGS2)

SSL issue with Android?

I noticed something interesting today. I changed the certificate for my mail server from z.net to a.com (moving domains - long story). The mail server that is listed in the email client (using built in email client - not the gmail app - with ActiveSync) is z.net - however the email client is not complaining that the host in the SSL certificate does not match the server name. Which had me thinking - so I installed "Packet Capture" and started to capture (and did NOT install the generated certificate into the trust store - which makes the certificate an untrusted self-signed certificate which could be used in a MITM attack). Android email happily connected and checked for email. Opened up the browser to browse the webmail and it complained that the certificate is not trusted (as it should).
I'm not an expert of ActiveSync by any stretch but is this a "feature" of ActiveSync? To ignore SSL verification???? I also use Outlook 2016 and it did prompt about the certificate mismatch.
I fired up an old phone that was using activesync with the gmail app and while it did not seem to update - it also did not show any certificate mismatch errors. Outlook for Android also seems to ignore the certificate mismatch.
Am I missing something really obvious?
(This could be a wider Android issue - but I found this issue specifically on my V20)

Categories

Resources