DroidForums.net is the original Verizon Android Forum! Registered Users do not see these ads. Please Register - It's Free!
Results 1 to 9 of 9

Thread: Certificate Questions

  1. Junior Droid
    ExecTech24's Avatar
    Member #
    109223
    Join Date
    Aug 2010
    Posts
    7
    Phone
    Droid2
    #1

    Arrow Certificate Questions

    Hello all, I'm testing some droid phones with exchange. I have gotten the PFX cert from our engineers, and then converted that to P12 format. I installed it from the SD Card and it said installed successfully.

    However, when I enter all the information for our exchange servers I am returned a message

    "The certificate from the server is not validated,. Do you want to disable verifying certificates for this account? (Not Recommended)

    1) Is this message saying that it doesn't recognize the certificate that it's reaching on our exchange server?

    2) If I choose disable verification, and I allow the account to be setup that way, am I running any security risks? I don't even need to install the certificate if I choose "disable verification"

    3) I've found other posts concerning the original Droid that advise to toggle a setting that says, "Allow all certificates" I don't see that in Droid2, does it exist?

    4) Is there an alternate way of setting up exchange on the Droid 2?

    Thanks in advance.
  2.  
     
     
     
  3. Junior Droid
    Catrinisin's Avatar
    Member #
    108947
    Join Date
    Aug 2010
    Posts
    10
    Phone
    Droid 2
    #2
    Do you know if your certificate is self signed by your server? Or did your company buy it from an authorized certificate authority?

    You can check the certificate and see who it says signed it. (Issued by)

    If this is a self signed certificate, meaning the certificate says that it was issued by your servername, then this is probably why you are getting this warning. It should be safe to disable verification of this certificate in this case.
  4. Junior Droid
    ExecTech24's Avatar
    Member #
    109223
    Join Date
    Aug 2010
    Posts
    7
    Phone
    Droid2
    #3
    Quote Originally Posted by Catrinisin View Post
    Do you know if your certificate is self signed by your server? Or did your company buy it from an authorized certificate authority?

    You can check the certificate and see who it says signed it. (Issued by)

    If this is a self signed certificate, meaning the certificate says that it was issued by your servername, then this is probably why you are getting this warning. It should be safe to disable verification of this certificate in this case.
    When I access our OWA page from the Droid2, it allows me to view the cert and says it's issued by GoDaddy.

    Thoughts now?
  5. Junior Droid
    ExecTech24's Avatar
    Member #
    109223
    Join Date
    Aug 2010
    Posts
    7
    Phone
    Droid2
    #4
    Actually downloaded Touchdown from the marketplace and had zero problems. Worked. I think I'm good to go...

    From what it seems, it reached out to our exchange server and accepted the cert ...
  6. Junior Droid
    Catrinisin's Avatar
    Member #
    108947
    Join Date
    Aug 2010
    Posts
    10
    Phone
    Droid 2
    #5
    Quote Originally Posted by ExecTech24 View Post

    When I access our OWA page from the Droid2, it allows me to view the cert and says it's issued by GoDaddy.

    Thoughts now?
    Sounds like an issue with the certificate then, or with the email program. But since it worked fine with Touchdown, must be an issue with the email client? It is supposed to check with the certificate authority to verify, GoDaddy/Starfield in this case.
  7. Junior Droid
    ExecTech24's Avatar
    Member #
    109223
    Join Date
    Aug 2010
    Posts
    7
    Phone
    Droid2
    #6
    Quote Originally Posted by Catrinisin View Post
    Quote Originally Posted by ExecTech24 View Post

    When I access our OWA page from the Droid2, it allows me to view the cert and says it's issued by GoDaddy.

    Thoughts now?
    Sounds like an issue with the certificate then, or with the email program. But since it worked fine with Touchdown, must be an issue with the email client? It is supposed to check with the certificate authority to verify, GoDaddy/Starfield in this case.
    Using Droid's corpsync app - if I choose "disable cert verification" (not recommended) --when prompted, the account it loaded fine.

    The problem with touchdown is that everything is stored within Touchdown itself. I know my execs will have a problem with not seeing emails or notificiations as soon as they look at their phone. Ugh.
  8. Junior Droid
    Catrinisin's Avatar
    Member #
    108947
    Join Date
    Aug 2010
    Posts
    10
    Phone
    Droid 2
    #7
    Quote Originally Posted by ExecTech24 View Post

    Using Droid's corpsync app - if I choose "disable cert verification" (not recommended) --when prompted, the account it loaded fine.

    The problem with touchdown is that everything is stored within Touchdown itself. I know my execs will have a problem with not seeing emails or notificiations as soon as they look at their phone. Ugh.
    So is the account working properly now that it is loaded? No need for Touchdown then?
  9. Junior Droid
    ExecTech24's Avatar
    Member #
    109223
    Join Date
    Aug 2010
    Posts
    7
    Phone
    Droid2
    #8
    Quote Originally Posted by Catrinisin View Post
    Quote Originally Posted by ExecTech24 View Post

    Using Droid's corpsync app - if I choose "disable cert verification" (not recommended) --when prompted, the account it loaded fine.

    The problem with touchdown is that everything is stored within Touchdown itself. I know my execs will have a problem with not seeing emails or notificiations as soon as they look at their phone. Ugh.
    So is the account working properly now that it is loaded? No need for Touchdown then?
    Yup, it is loaded. I just wanted some clarity on the message that I was seeing that I bypassed in order to get the account on the phone. By "disabling certificate verification" am I still secure?

    I interpreted that message as, "There's a certificate that I'm getting but the droid doesnt recognize it".

    Is that the case? If so, then we're good because I know where the cert is coming from -- my company. lol
    Last edited by ExecTech24; 08-25-2010 at 01:52 PM.
  10. Junior Droid
    Catrinisin's Avatar
    Member #
    108947
    Join Date
    Aug 2010
    Posts
    10
    Phone
    Droid 2
    #9
    Yeah you should be good. That message does indeed mean it could not verify the certificate, but it is still using the certificate and running secure.

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. Certificate Issues
    By Weygand in forum Droid Incredible Tech Support
    Replies: 8
    Last Post: 02-15-2012, 02:10 PM
  2. How to Certificate root a PFX cert?
    By v188 in forum Rescue Squad Help
    Replies: 0
    Last Post: 08-18-2010, 07:54 PM
  3. Security Certificate issue
    By crysk in forum Android Tech Support
    Replies: 2
    Last Post: 01-31-2010, 10:06 AM
  4. Can't install security certificate Exchange ...
    By Champ in forum Motorola Droid
    Replies: 1
    Last Post: 12-21-2009, 12:09 PM
  5. Installing a certificate for wireless?
    By valnar in forum Android Tech Support
    Replies: 0
    Last Post: 11-24-2009, 07:48 AM

Search tags for this page

certificate from server is not validated
,
certificate from the server is not validated
,
certificate from the server is not validated droid
,
droid certificate from the server is not validated
,
droid the certificate from the server is not validated
,

error adding account the certificate from the server is not

,
the certificate for this server is not validated
,

the certificate from the server is not validated

,
the certificate from the server is not validated droid
,
the certificate from the server is not validated. do you wan
Click on a term to search our site for related topics.
Find us on Google+