Kitchen and Certificates

froboy · #1 (**permalink**) 06-22-2007, 10:26 AM

How do you build a certificate into the kitchen? I have a custom root cert I want to add.

vboyz103 · #2 (**permalink**) 06-22-2007, 11:00 AM

there is an OEM.cert in OEM root, try to name ur cert as OEM.cert and overwrite the old one. I'm just guessing though!!

froboy · #3 (**permalink**) 06-22-2007, 11:48 AM

I saw that. I want to understand how certificates are being inserted into the build.

JBabey · #4 (**permalink**) 06-22-2007, 12:11 PM

Quote:

Originally Posted by froboy

I saw that. I want to understand how certificates are being inserted into the build.

look at the sprint OEM package, youll see how they are inserted. look at the rgu, and the provxml

Ryan07 · #5 (**permalink**) 08-12-2007, 08:35 PM

I was able to extract my ActiveSync information from the registry (just search for your OMA server FQDN) and add it to the kitchen. When I open AS for the first time, our Exchange server is there but it won't sync. Invalid server certificate is the error. I too am very interested in getting this to work. It's the last step in my "perfect" ROM. I looked over the Sprint OEM but it doesn't make sense to me. Surely it calls one of the executables to install the cert, but I don't know which one it is.

As a side note, I also extracted my local PC AS information. I added it to a test ROM but it didn't take. The device was recognized as new when I plugged it in and I still had to create a connection. I am encouraged by the Exchange stuff sticking though. If I can get that cert installed, I'll be able to bypass that portion at least.

Ryan07 · #6 (**permalink**) 08-14-2007, 12:30 AM

Okay, I got this to work using the tool from this site. The download link is dead so I've attached the file at the bottom.

http://blogs.msdn.com/windowsmobile/...hainsaver.aspx

Download and unpack the attached file.
From a command window, run SSLChainSaver.exe (your FQDN) [Enter]
This will pull the certificate information directly from the server (in my case, our Exchange server) and create an xml file in the same folder. A copy of the cert is also saved, but it is not needed.
Change the xml file name to mxip_(whatever you like here).provxml and place it in one of your OEM directories.
The next time you flash your ROM it will be there.

Hurray, my perfect ROM is complete!