certificates?

[Time_Lord]

My mailserver uses a self signed certificate for ssl and tls. Normally its not an issue with workstations but the android screams multiple times when connecting via IMAP so much so I gave up logging into my server.

The question is, how do I import my server cert into the phone?

Thanks,
TL

[myltz400]

I have the same question, on WM you just put the cert. where you want (sd card or main mem) and click on it to add it to the phone. Does this work on the Hero.

Our IT dept is out of control....

[Time_Lord]

If it does I don't know how, I put the cert on the SD card but not sure how to "open it" other than to view it as text

[myltz400]

Mine on WM never opened but it did say "installed" or "saved" I can't remember which.

[Time_Lord]

I spoke to Sprint who then connected me to HTC, the short answer is you can not import a certificate into the phone. However that is not completely correct.

The problem is the application needs to accept the certificate, in this case the mail application, the mail application supplied with the phone refuses to use a self signed certificate. I did find K-9 email (and yes its named after the dog in Dr. Who where my nick comes from ) and that does accept a self signed certificate, but there is a caveat with the program...

The program accepts any certificate and stores it without presenting you with any way to verify the authenticity (fingerprint) of the certificate which in turn leaves you open to a man in the middle attack. Realistically I'm more concerned of somebody pulling a clear text password off the wire rather than a man in the middle attack but your mileage may vary.

My next problem is find what program other than the sms client is keeping the phone awake... maybe K9?

TL