S40 Support for CA Certificate Import

Someone requested S40 support for the CA certificate Import 'Wizard'. This 'tool' is being used over 50 times a day, so I guess that it works :-). Knowing that it is being used, I added S40 support (theoretically that is, since I don't have such a device). Just select the type of device you have (S60 or S40 based). Depending on the selection the extension, and MIME type will be changed. The S40 devices expect a different MIME type (application/vnd.wap.hashed-certificate). So I added this MIME type to my webserver and associated it with .cer files. More information on this page. Note, that you need to upload a WPKI certificate instead of a normal one. I'm still figuring out what the exact difference is, so I might do a conversion.... UPDATE: import on a S40 doesn't work, so don't bother.

Click to read more ...

Installation Root CA on Nokia E61 Made Easier

Updated on Wednesday, February 10, 2010 at 8:53 by Willem

From this day on, you can install certificates from non-trusted CA's on your Symbian-based phone (like the Nokia E61) using this page euh.. this page.

UPDATE: it seems that most other phone brands and types work as well (the S40 based devices are left out... sorry).

All you need to do is make sure that the certificate is in the DER format. The webpage doesn't verify if the certificate is in the correct format. This is up to the uploader.

I created this page, because I work a lot with digital certificates, so I don't want to be bothered with the workaround described in the earlier post. The current version is quick-and-dirty (no error messages). I'll try to make it more user friendly in the next couple of days (like having the option of sending the URL to an e-mail address). Just make sure that you obey the guidelines shown on the page, and all should go well.

Feel free to add a comment on how to improve this.

Click to read more ...

Import Root CA in the Nokia E61

Last week, I recieved my new Nokia E61i. As soon as I tried to connect to my own IMAP server (over SSL/TLS) is started nagging about the (selfsigned) SSL certificate.

The E61 has a certificate store, so I should be able to add other Root CA's to this store, but this is where the trouble began.

The manual has a chapter on certificates, but it lacks a working explanation on "how to import third party root CA's". On my old iPaq, it was simply upload a DER encoded certificate, click on it, and it would install. Well this doesn't work on the E61 (and many other Symbian-based) phones. Just 'google', and you'll find lot's of people with similar problems...

The working solution I found uses a website from which you download the certificate with the phone, but there is a catch; you need to add a MIME-type to the website containing the certificate (hence the admin rights).

Click to read more ...