Kitchen and Certificates
 

How do you build a certificate into the kitchen? I have a custom root cert I want to add.

there is an OEM.cert in OEM root, try to name ur cert as OEM.cert and overwrite the old one. I'm just guessing though!!

I saw that. I want to understand how certificates are being inserted into the build.

look at the sprint OEM package, youll see how they are inserted. look at the rgu, and the provxml

I was able to extract my ActiveSync information from the registry (just search for your OMA server FQDN) and add it to the kitchen. When I open AS for the first time, our Exchange server is there but it won't sync. Invalid server certificate is the error. I too am very interested in getting this to work. It's the last step in my "perfect" ROM. I looked over the Sprint OEM but it doesn't make sense to me. Surely it calls one of the executables to install the cert, but I don't know which one it is.

As a side note, I also extracted my local PC AS information. I added it to a test ROM but it didn't take. The device was recognized as new when I plugged it in and I still had to create a connection. I am encouraged by the Exchange stuff sticking though. If I can get that cert installed, I'll be able to bypass that portion at least.

Okay, I got this to work using the tool from this site. The download link is dead so I've attached the file at the bottom.

http://blogs.msdn.com/windowsmobile/...hainsaver.aspx

Download and unpack the attached file.
From a command window, run SSLChainSaver.exe (your FQDN) [Enter]
This will pull the certificate information directly from the server (in my case, our Exchange server) and create an xml file in the same folder. A copy of the cert is also saved, but it is not needed.
Change the xml file name to mxip_(whatever you like here).provxml and place it in one of your OEM directories.
The next time you flash your ROM it will be there.

Hurray, my perfect ROM is complete!