[Q] Windows Mobile 6.5 Disable SSL v3 - Windows Mobile Development and Hacking General

I have a Windows Mobile 6.5 phone with the latest energy rom developed. My email provider enforces SSL and since a week it is not possible to receive emails anymore. I was in contact with my provider and they disabled SSL v3 in relation to the POODLE attack.
Is Windows Mobile not using TLS v1.0 and further. I am using the standard Messaging software in Windows Mobile 6.5.
I also updated installed one root-certificate but do I have delete other root-certificates?
The option to view certificates does not show which kind of SSL or TLS they are supporting.
Can I update Windows Mobile 6.5 Messaging to TLS?
Thanks for any help.

Problems with ssl and windows mobile 6.5
Hello @flyingblackbird,
please follow the thread (I'm new member and prevented to post the link directly) at
pocketpc.ch/htc-hd2-kommunikation/220745-htc-hd2-ssl-e-mail-pop3-probleme.html
I do not know if you could update your phone OS, but you could replace your email client by profimail.
It is for free and it works properly. Configuration is a little bit strange, but after working with it for some time you will understand it.
Important: you must select in the menu "extended configuration" in the appropriate boxes the right SSL protocol (StartTLS) by pressing the arrows and the correct port configuration.
Hope it helps solving your problem.
Kind regards
Mary Hopkins

Profimail
Hello @Mary Hopkins
thank you for your suggestion to use Profimail. I installed the program and it works really well. It has a lot more functions than the standard messaging program. I tried to use Fleximail and Qmail but especially Fleximail is not freeware.
I tried a bit to look at the registry in order to disable SSL v3 but it is not easy and of course dangerous. I found a few keys for Opera which seems to be easier to disable. A general key for TLS 1.0 does not even have a value.
Nevertheless, thanks a lot for mentioning Profimail.
Greetings

Related

Integrated Windows Authentication

Hi,
I'm having a mare trying to get more info anywhere on the web.
I have an Intranet based web app running on latest version of IIS with .NET & SQL Server 2000 (on different boxes) using Integrated Windows Authentication (the IIS is trusted to the SQL Server box)
It runs fine on IE v6 provided the Enable Integrated Windows Authentication checkbox is ticked.
However on the XDA using Pocket IE (ROM 3.17.03 ENG) it gives Login failed for user 'NT AUTHORITY \ANONYMOUS LOGON' which usually means no Integrated Windows Authentication.
I can't find any docos on whether Integrated Windows Authentication is supported in Pocket PC 2002 - has anyone else come accross this or got any pointers they could help me with?
Thanks
As far as I know, Integrated Windows Authentication means that IIS will use the user's Windows login to authenticate the user. This is normally using your DomainName\Username for windows. When you are on your xda, you are not authenticated by Windows as the xda is not on the domain and you are logging into "Windows" using the same DomainName\Username on your xda. Try changing the IIS setting to use simple authentication so that users are prompted for a username and password to access the website.
I hope this helps
Thanks Illwil.
I can't allow simple authentication on the IIS as it will then screw the security for PC users (ie 99%)
I'm already logging onto the Domain via a dial up connection so it should all be OK
I think its something to do with Pocket IE declaring itself as IE version 4 to the Web Server rather than as Pocket IE
IE v4 doesn't support NTLM authentication (ie Windows Integrated Authentication) whereas I think Pocket IE should.
Also I've got 2002 which means that ByPass proxy server for local sites is automatic so its not that.
Still scrabbling - any help still gratefully received!
An answer after 3 months!
Bit of a dull one I know but just in case anyone was interested (!) I've used some mobile web forms instead of normal web forms - they only support ObjectList as opposed to DataGrid but seem to allow the windows integrated seciruty to work.
Thanks to anyone that gave this some thought.
John

IntelliSync scheduler not working

Hi, I installed Intellisync on my new HTC Touch Dual. If I trigger Sync by pushing the button everything works fine.
My surprise the ReadySync scheduler does not work! The PDA does never trigger an unattended sync.
Tried with device on & off, forced connection, etc. with no success.
Also tried to install different versions of the CABs. The two I have are 6.5 and 7.0.5. The same versions work fine on other WM6 devices of my colleagues (TytN, Glofish).
Any idea?
Found the solution
Hi, nobody answered my question but I think I found the solution which I post in case someone else has the same problem ...
The issue is with Connection Documents. The HTC auto-configured GPRS/Edge/UMTS at first setup based on info from my telecom provider (Swisscom).
For some reason intellisync has a problem in reading these connection documents. What I did is creating a new copy manually with the same GPRS settings and set "Auto Pick" option under Connection Manager.
After that Intellisync started to execute scheduled synchronizations! Strangely the manually created connection is not visible in its connection setup list, but who cares - it works.
Do you know where can I get the Intellisync cabs? The one my company provided me with makes my Niki to reboot after each sync. (Pretty annoying..)
Anybody?
Intellisync
We cannot
For these reasons :
1) Intellisync is copyrighted and we do not use warez
2) The client is linked to the server version. You cannot install ver 8 on your pda to synchronize with a version 7 server for exemple
3) Every intellisync server comes with a full set of intellisync client so your company have the right one for you

MS hotfix for SMTP not needed for HD

In case you are wondering if you need to install the hotfix Microsoft released yesterday for the deadly SMTP "bug" in WinMobile: You don't need it, since HD has 6.1.4, and patch is only needed for up to 6.1.3 . Only remedy until now was hardreset, for pre-HD.
Link to MS hotfix page: http://bit.ly/Kv5b
This behavior is associated with a feature that was introduced in Windows Mobile 6.1. It provides a way for users to send e-mail through an alternate outbound e-mail server provided by their mobile operator in the event that the default outbound e-mail server becomes inaccessible.
The problem occurs if a mobile operator doesn't use this feature, and therefore doesn't supply a value for the alternate SMTP address. When the mobile device fails on any attempt to connect to the e-mail provider's default SMTP server, Windows Mobile 6.1 automatically loads the value for the alternate SMTP server—which in this case is blank. The e-mail account configuration details are then corrupted, which results in loss of the ability to send e-mail with that particular e-mail account.
With this fix, the feature is patched to ensure that Windows Mobile 6.1 takes appropriate action when it detects a blank value for the Alternate SMTP server.
TT and Garmin did work, but now not getting gps fix, advice please.
Hi!
sorry miss post !
Ofiaich
Ofiaich, I think you may have replied to the wrong thread there.
Lucas0511 said:
In case you are wondering if you need to install the hotfix Microsoft released yesterday for the deadly SMTP "bug" in WinMobile: You don't need it, since HD has 6.1.4, and patch is only needed for up to 6.1.3 . Only remedy until now was hardreset, for pre-HD.
Click to expand...
Click to collapse
Thanks for that information
Good news is always most welcome !
- Steve
hi there
i just want to make clear that the smtp bug is NOT fixed on WM 6.1.4 . I recently bought the HD
and it has like mentioned before
WM 6.1.4.0 running on it, but still i cannot send emails,
it wont connect with the smtp server. Can anyone tell me wether an un-
official fix is available for the smtp bug on WM 6.1.4.0?
i looked everywhere but found nothing.
thanx in advance
same problem
6.1.4 is not fixed, smtp fails... and you can't install the fix that works only until 6.1.3
please help, I tried anything but I can't find any good tip or patch around..
thanks
I do a lot of email on my HD, before with SMTP. But I prefer Push (receiving email on my HD automatically), so if your provider supports Imap maybe Imap Pusher Service is for you:
http://www.codeplex.com/ImapPusherService
The program is no longer supported, and has a bug freezing it when it cannot connect to the server for a prolongued time (no signal), but it works fine in major coverage areas. I use it with Gmail and German GMX.
Well, since the bug is basically that your operator has not set a secondary SMTP server in the registry, maybe this reg entry suggested by ButtonBoy from this forum here could help you.
1. Add the reg key “Operator” to \\HKLM\System\Inbox\Settings
2. Add the reg key "OutgoingServer" below Operator key.
3. Add the reg val (reg_str) "OutgoingServer" below Operator key- “127.0.0.1”
4. Soft reset
Of course this is not a working SMTP server, but maybe your Outlook Mobile will be happy with it.
http://forum.xda-developers.com/showpost.php?p=2776411&postcount=83
I tried buttonboy fix...
doesn't work
smtp settings from my provider are:
incoming:
mail.xxx.com ssl activated
smtp:
smtp.xxx.com ssl activated
username and password different from incoming
Ok, just to make sure, and since the smtp/imap bug corrupts your mail account and settings, did you try the buttonboy fix with a new mail account, not an already corrupted one I hope.
The Outlook Mobile team on the blog says its working on a fix for the fix, but only covering problems with the initial fix not being validated by a certificate on the mobile. Doubt this will cover problems you have.
In the meantime, maybe you could try out Flexmail trial client as an alternative to Outlook Mobile messaging.
http://www.webis.net/products_info.php?p_id=mail
thanks...
I'm trying flexmail
my provider told me that maybe the bug it's depending on their server not running windows but linux.

[UPDATED 2009-11-24] Company proxy problem - there is a solution (start checking #2)

Hi all,
As far as I know anybody that needs to connect to the internet through a company proxy (3G or wifi), using Win Mobile 6.1 or 6.5, is facing "big problems".
From what I found doing some searches here in xda and in the internet this seems to be due:
- to a "bug" in the proxy configuration sw that keeps to "0" (instead of "1") the "Type" field of the HTTP-{xxxxxxx} key in HKEY_LOCAL_MACHINE\Comm\ConnMgr\Providers\{EF097F4C-DC4B-4c98-8FF6-AEF805DC0E8E}. In other words is like keeping NullProxy configuration insead of HTTP... But this seems to be an "old bug", now the correct configuration is properly saved (I checked in the 6.5 rom I am using and I can confirm).
- But even if the correct configuration is there the proxy password it is ignored, at least for HTTP (source: http://msdn.microsoft.com/en-us/library/aa455855.aspx )
For that reason, in my experience, the only programs that can access the net are Internet Explorer and Opera, that allow the user to insert account and pw of the proxy and go ahead... And this should confirm that only the configured proxy address is properly used, not the stored account and password...
But now the "surprise":
I can confirm that the following 4 roms ALLOWED ME TO SURF THE NET TRHOUGH A PROXY WITHOUT ANY PROBLEM !!!
I mean update the weather, use GoogleMaps, use MusicID, check sw updates, update GPS data... and so on !!!
The named roms (for the HD) are:
WM 6.5: (NEW !!!)
[ROM][WWE] XannyTechROM GRID LEO M2.5 ROMS (all versions)
(Note: only with the proxy password saved also in Internet Explorer...)
WM 6.1:
[ROM][WWE][24.07.09][21051.1.6.4]-=® panosha ® =-Black Pearl v 3.4 ("open" ROM, as the author says in his first post)
[ROM][ITA][14/04/2009] LP HD EVO II (5.2.21041 build 21042) Latest Manila
And now the question, as the solution must exist:
Where should we look to find the proper configuration in order to finally use it in all other roms ??
I started checking from the registry, but with no success..
I really hope to see some interest in this, as I understand it is not a "really common" problem...
Regards,
K
THE SOLUTION ... or at least the "very beginning" of it !!
I start suspecting that when the proxy password is saved also in Internet Explorer the chances to be able to use a company proxy with password are increasing... but I still do not understand...
What follows is what I noticed:
- In the WM 6.5 XannyTech ROMs I am using before saving the IE proxy password ONLY the quick GPS update was working (weather update, google maps, ecc. were not able to connect...). This actually means that both account and password of the configured proxy where properly used... but only from the quick GPS progam...
- When I saved the IE proxy password ALL programs that are using the network properly worked... that means that all programs properly red the proxy address stored in the "network section" and the proxy password from IE...
Can somebody try with other ROMs ??
Regards,
K
PS: And why with other ROMs this does not seem to allways happen ??
me 2, the same issue.
I have been trying but still unsuccessfull.
I hope someone can find the solution for this.
Found new rom working
I found another HD rom working properly:
[ROM][WWE] XannyTechROM GRID LEO 1.7b M2.5
So, as I said, a solution exists... but where ??
Regards, K
(PS: First post updated)
Updated post #2
K
PS: Actually I wrote this post mainly to keep the thread "in the first page"... sorry about that !
I'm using Kisja's WM6.1 ROM (thread) and cannot get proxy to work at my university. I can access local sites, which probably means that there is something wrong with the proxy settings.
But here comes the weird thing: I can check mail through the standard WM e-mail client, and this works great, but I cannot update Manila weather nor surf the web! I've tried both Opera and IE without success.
longice said:
I'm using Kisja's WM6.1 ROM (thread) and cannot get proxy to work at my university. I can access local sites, which probably means that there is something wrong with the proxy settings.
But here comes the weird thing: I can check mail through the standard WM e-mail client, and this works great, but I cannot update Manila weather nor surf the web! I've tried both Opera and IE without success.
Click to expand...
Click to collapse
Just to be sure that I understood: are you using account and password to connect to the proxy, or only the address ?
In may case, I use account and password.
And, just to share, some other little things:
- Not all programs are working through a proxy with account and password... for example Midomi works only through a proxyless connection
- This, toghether with what alreay noticed in the previous posts, confirms that there are programs able to use WM proxy configuration and others not...
We will see...
K
I think that it may be based on the WM build # and what has been removed.
I know I would try dasense's daG's latest kitchen (or equivalent for your phone) without excluding any windows sys packages or certs and running the latest com5 build. 23515.5.5.0
Everything that I've tried works through my company proxy currently.
kostas66 said:
a "bug" in the proxy configuration sw that keeps to "0" (instead of "1") the "Type" field of the HTTP-{xxxxxxx} key in HKEY_LOCAL_MACHINE\Comm\ConnMgr\Providers\
Click to expand...
Click to collapse
If found the responsible for this (at least from what I'm seeing : you have a company proxy set up on your USB ActiveSync connection and as soon as you do a sync the "Type" field goes from "1" to "0" thus disabling the proxy.
You'll find a key in "HKEY_LOCAL_MACHINE\Services\App\Tasks" that is something like "DisableProxy", delete this key, restart the phone and you'll be all right.
It seems to me that this is a HTC feature; on some rom it is enabled, not on others... go figure (and I don't know why such a feature exists)
Regards,
Stéphane.
thanks alot
Hello all, I found the solution.
You must:
set the proxy in the APN configuration
connect to the net via Internet Explorer
fill the username and password in Internet Explorer and SAVE it
that's all
This worked for me with the plain rom in the HTC HD2

How to Liberate Shift on Windows 10 in Sept 2016

I have purchased a HTC Shift from Ebay. It has Windows 10 pre-installed. I'd like to Liberate it and understand the guides but the issue is it is not possible these days to use the Shift email as no email servers seem to work due to SSL V3 being deprecated. Also as I am on Windows 10, Mobile Device Management does not work so it is not possible to form a sync partnership (unless someone knows how).
This leads me to not being able to find a way to get the liberated files actually on the Shift.
Does anyone know of a way that I may be able to do this ?
Just posting to reassure you that once you have liberated you Windows Mobile side, Windows Mobile Device Management will work with Windows 10.
Sorry this doesn't help with your initial problem. Have you tried different permutations of setting in the email account setting of Snapvue, or are there no setting available?
Thanks for the reply but no ability to change settings in the email account settings of Snapvue.
Flanimal said:
Just posting to reassure you that once you have liberated you Windows Mobile side, Windows Mobile Device Management will work with Windows 10.
Sorry this doesn't help with your initial problem. Have you tried different permutations of setting in the email account setting of Snapvue, or are there no setting available?
Click to expand...
Click to collapse
Sorry to hear that.
Install a quick and dirty email server on your LAN, send yourself email using that server just for this purpose. I'd do that if I were stuck. Good luck?

Categories

Resources