Open SSL / Self Signed Certificates

[BouncyNinja]

Hi all

i would really appreciate some help , if someone has the skills to help...

one of our bright staff members brings me a HTC, with WP7 on,

now, one would assume that a WINDOWS phone, would be able to talk to Exchange.... errrr, apparently not

i have done some scratching around, and it seems to be certificate related, and im pretty sure i wont get the boss to go for $800 a year for a certificate for a multi domain certificate from Thwart or one of them people just for our owa..

the other option was to create a self signed certificate, add it to the servers root trust thinngy , and import that certificate on the phone,

i've been trying to get this stupid thing to work all weekend, but openssl and me are just not understanding each other,

can someone advise me on how to create a self signed multi domain certificate (.cer and .pfx file), and to keep WP7 happy, it seems it cannot be more than a 128bit certificate either

Thanks

 

[iblade]

To add a cert to Windows Phone 7 is fairly straight forward, follow this article: http://blogs.technet.com/b/dcaro/ar...g-a-windows-phone-7-to-exchange-2010-sp1.aspx

To get a self signed cert is also fairly straight forward:
1. On one of your Windows servers add certificate services.
2. Generate the certificate request from Exchange for a certificate
3. Import the request into your CA and issue the certificate
4. Complete the certificate request process from Exchange
5. Setup Exchange web services to use this certificate (step might not be needed, if these services are already setup)
6. Make sure that the mailbox is ActiveSync enabled
7. Import the CA cert into the phone, as per the article (the phone must be able to get to the CA, e.g. over the internet or Wi-Fi)
8. Setup Exchange mail on the phone.

If you need further help, PM me.

 

[BouncyNinja]

wait

wait

i think i got it working


thanks iblade

the article didnt work, but showed me what i was doing wrong, exporting the certificate as a p7a ( or whichever) done the trick for some reason, it doesnt seem to like a cer file