cert-based authentication - Android Q&A, Help & Troubleshooting

Hi,
We are using a IIS Server to authenticate the user with a certificate against OWA (Outlook Web Access) on Android phones with the Google Chrome Browser.
The authentication is working fine.
But when the device has more than one certificate the user gets a pop-up to chose the right certificate. And the selection is not saved in the Google Chrome Browser. So every time the user wants to access OWA, he has to chose the correct certificate.
Is there a way to bypass this pop-up? And is there a way to store the selection?
Thanks.

Related

[Q] Login issues with email?

Hi,
I have a rooted NC. I fired up the email program to retrieve my Yahoo email and it prompted me to put in my email address and password. When I clicked "Next", the Nook looks like it tried to setup the email, but then came back and said "Bad username or password". I triple checked both and even logged in via Web Browser successfully, but couldn't via email. I also tried the manual configuration for Yahoo, but it still didn't work.
Has anyone seen this and know a solution?
Thanks!!!
Found most of this on another forum and tweaked them a bit to work for me:
1. Press the E-Mail icon (the default Android E-Mail application).
2. Enter your Yahoo E-Mail address and password.
3. Press “Manual Setup” in the lower left hand corner.
4. For “Incoming Server Settings” set the IMAP server to “imap.mail.yahoo.com” and the Port to 993 with SSL Security.
5. For “Outgoing Server Settings” set the SMTP Server to “smtp.mobile.mail.yahoo.com” and the Port to 587 with no security.
6. Check “Require sign-in” and press Next.
7. Select how often your device will check for Email, and choose default options.
8. Give the account a name and set your display name for outgoing messages.
This should get it working for you.
Excellent!!! That did the trick. Thank you very much for the help biggins!!!
No problem. Glad I could help.
This works for me too. Thanks a bunch!
I'm having issues logging into my Google accoutn after having upgraded my Nook to CM7, repeatedly getting the message that my username and password don't match ....
Figured it out....had to go for some special password because of the 2 step identification that google has...

cannot safely connect to server [emails]

hi guys can anyone help suddenly i cannot mail anyone from my yahoo account i get error cannot safely connect to server(not trusted server certificate)
i tried to remove the account and set it up again but now its not even setting it up and giving the error(java.security.cert.certpathvalidatorException:trust anchor for certification path not found)
my gmail is working fine
adithebratt said:
hi guys can anyone help suddenly i cannot mail anyone from my yahoo account i get error cannot safely connect to server(not trusted server certificate)
i tried to remove the account and set it up again but now its not even setting it up and giving the error(java.security.cert.certpathvalidatorException:trust anchor for certification path not found)
my gmail is working fine
Click to expand...
Click to collapse
What are the exact settings for your yahoo account?
I do not mean your email and password ... that should be on your side only.
I mean server, port, protocol, etc.
Did you configured it as premium (IMAP) or POP3 or Microsoft Exchange Active Synch?
Which security type have you selected (no, SSL, TLS, ...)?
You can specify all this settings in manual config.
I think that Yahoo only supports POP3 (pop.mail.yahoo.com) for incoming and SMTP (smtp.mail.yahoo.com) for outgoing mails.
But I am not sure as I do not have a Yahoo mail account.
If your Yahoo mail synchronization worked before, you have enabled SMTP already at Yahoo for your account.
But what happened that this does not work any more?
Have you changed a special setting, another account, firmware, installed or un-installed an app?
Sometimes it is helpful to wipe the cache in recovery mode (Volume UP + Home + Power).
Good luck !
Yes i updated my firmware frm 2.3.3 to 2.3.5 last week and actualy never used my yahoo after that so do know when it started today i tried to mail but it gave error sending failed not a secure conection so i deleted the acount and tried to setup up again now its just not seting up giving me error i mentioned before i tried all settings imap pop3 ticked accept all ssl certificate n saw bt no use it says unable to connect
P.s :gmail is working fine
I installed k-9 app and it easily setup my yahoo acount and i can mail through it too dont know what went wrong with the default application(social hub)
stil i would like to know what went wrong if anyone could help
I know this may sound stupid, but can you get into the Yahoo account via the web (on the phone or PC)? At least this will confirm you have the correct username/email address and password.
What server settings did you put in?
Brother i said i can access now via k9 but still not via the default social hub and yes i can acces through pc and mobile browser too
i tried all the possible settings in the social hub like pop3; imap ;ssl certificate on; accept all ssl certificate but no use so currently i m using k9
i think it has to do something with the certificate validation as the error says so but i dont know the solution to it
p.s : phone not rooted
Had the same error today. Read somewhere to change the Yahoo account's outgoing settings on the phone to SSL with accept all certificates, but that didn't help. So I changed security type to None, and all mail starting flowing out of the outbox again. Guess next time I get the error I'll change back to SSL...
I cant change the outgoing settings of server unless i login and i cant setup only the yahoo account so i dnt get option of manuly editing outgoing server
This is an SSL problem, android does not always include all chained root certificates.
You will still get an error like this:
Cannot safely connect to server.
(java.security.InvalidAlforithmParameterException: trusteAnchors.isEmpty())
Certificate chain[0]:
Subject: CN=(SSL common name here), OU=Domain Control Validated - RapidSSL(R), OU=See
etc...
This needs to be fixed in the build.
I get this problem running latest android 2.3.7, CM7 with SavagedZen Kernel
Would love a fix so I can use SSL again.
Juststarted receiving this error message TODAY. No changes or updates to anything on my phone...anybody know how to fix this.
I also starting getting this today (Cox email). Changing the SSL option to "SSL (Accept all certificates)" fixed it for me.
after sougote
On the email settings tap on outgoing settings and change security type to none.
That worked for my AOL account it might work for others. Worth a try anyway.
i'm facing the same problem...
solution is go to application->setting->Account and sync->add account..
Then yahoo account that I put in account&sync will auto display in mail..
So I didn't facing the giving the error(java.security.cert.certpathvalidatorExceptio n:trust anchor for certification path not found)...:fingers-crossed:
ATT.net mobile email stopped July 25th : solution
adithebratt said:
hi guys can anyone help suddenly i cannot mail anyone from my yahoo account i get error cannot safely connect to server(not trusted server certificate)
i tried to remove the account and set it up again but now its not even setting it up and giving the error(java.security.cert.certpathvalidatorException:trust anchor for certification path not found)
my gmail is working fine
Click to expand...
Click to collapse
I've been using Att imap.mail.att.net for years for inbound mail (on my Android phone using 4.4.2 ) and ATT mail stopped receiving on July 25th for no obvious reason. I fussed with it a while and fortunately was able ot figure it out. If you follow my steps it should work:
Another contributor mentioned "can't safely connect to server" is actually an SSL error message. He's right... for reasons unknown they've changed something about SSL.
You must change your SSL setting from SSL to the alternative : SSL (accept any certificate) The phone informs you it is testing the connection after you change this. with just SSL it will fail, but once you've changed it you will notice the error message has changed.
Once you observe the test is passing, you have the original problem fixxed, but I still had to mop up the existing mess. Here's what I did:
1.) jotted down all the settings in the imap screen including my account name etc.
2.) Removed the account (with imap all messages are still on the server and will come back later)
3.) reboot (this may have been superfluous
4.) reinstalled the mail account using the jotted down settings ... and don't forget .. set to SSL (accept any certificate)
That should do the trick.... Take care

It's very useful app!

Have been looking at this app for awhile because I wanted an application who securely store my online identity and personal information on my mobile device. Wanted all my personal data to be safe but also I to have access to them wherever I may be.
I found an advertising of this application and I decided to try 30-day trial version of Password Genie. After 30 days to use of this app can say I am very satisfied with this application. This app helped me to escape worry that I will not forget something very important. Password Genie lets you securely take your information with you wherever you go.
Once downloaded, Password Genie installation is simple. After installation, I create my personal pass code and all done within just a couple of minutes.
It's easy to use because can organize my data by categories and create personal folders.I love this. Is a well organized app with bookmark your favorite sites and auto-launch web pages. Very useful for me.
Using this app I can save all of my usernames and passwords in one secure location so I never have to write them down on paper again.
To store your passwords in Password Genie, launch the program and enter your username and password into a Saved Login form. You can easily view and edit all your saved logins and other categories at any time from your home screen. To access your saved login, press the URL or 'Go' button from the saved login and Password Genie will automatically fill your information into the webpage. No copying and pasting to your device's clipboard required!
A very important thing is install and synchronize with the Password Genie Mac and PC desktop companion to access all my information from work, home, or on the go.
Password Genie automatically synchronizes with all your devices where Password Genie is installed and with the Mac and PC desktop companion you can synchronize across all your computers as well.
Accessing and retrieving information is very easy. To access your saved information, navigate to your Password Genie category list and choose the entry from the convenient dropdown menu.
You can adding new entries very fast. To begin adding new entries in Password Genie, launch the program and press "Add New Entry." You can then choose the category you would like to create the entry for. Password Genie has 11 categories available to you and allows you create a custom category.
It's a very safe app because Password Genie uses industrial-strength encryption and security. With Password Genie only you have access to your information. This application provides everything I need for to securely store my online identity and personal information. It works like an electronic wallet.
It's the perfect app for to save internet bookmarks, logins and passwords. Is a stable and secure app. Overall this is a great app. It's never been so easy to save passwords and personal information. Five stars for my experience with Password Genie.
password manager | ewallet | password storage

[Q] Google Apps Device Policy?

Hi everyone,
I'm curious if anyone here has had any success or issues with the Google Apps Device Policy app. Has anyone had trouble with getting the Device Policy activated (for a protected corporate Google Account, for instance) on any custom ROMs? If so, which?
I flashed Th3Bill's CM10 the other day, and we had hiccups trying to get Device Policy to approve my work's Google Account. I wasn't sure if the trouble was on our IT department's side, and our IT department isn't the most user-friendly with trial and error to see if the issue was on the ROM's side or on theirs...
Not sure if this helps but I had no issues getting two university Google accounts to sync.
I had to set up a seperate password for one place. They use a single signon method where the university is the middleman and there was no direct way to use your single signon password for just the Google account. Just added a seperate password for just the Google portion and all is well.
atroph said:
Not sure if this helps but I had no issues getting two university Google accounts to sync.
I had to set up a seperate password for one place. They use a single signon method where the university is the middleman and there was no direct way to use your single signon password for just the Google account. Just added a seperate password for just the Google portion and all is well.
Click to expand...
Click to collapse
Yeah, this is a different configuration - in essence, my IT department requires the ability to remote wipe that specific Google account from all of its devices, so it uses this app as a way of gaining permissions to that account. In essence, I can add the Google account to my phone, but no data will load (it will read "sync error") until the Device Policy App is approved.
Ahh ok. Like a goodlink account. Didn't know Google supported such a thing.

App issues when connecting to site with Let's Encrypt SSL certificate

I am trying to get Moon Reader to connect to a Calibre book server that is using a Let's Encrypt SSL certificate. I get a java error "trust anchor not found".
I can access the calibre libary using Firefox on the android phone along with Firefox on a laptop. Moon reader has a problem with the intermediate certificates. Another app called Calibre Companion has no problem accessing the server.
I have installed the two intermediate certificates from Let's Encrypt in the android certificate manager but I still get the error.
https://letsencrypt.org/certificates/
Does anyone know which certificates to install to allow Moon Reader to access my calibre server?
Thanks,
Folsom68

Categories

Resources