E90 and untrusted certificates

A couple of years ago, I wrote about how to solve the problem of the Nokia 9500 complaining about an untrusted (self-signed) certificate when picking up one’s mail over SSL/TLS.

Well, the E90 suffers from the same problem and, again, there’s no way to elect to permanently (until its expiry) trust the untrusted certificate at the time it is presented.

As with the 9500, there is a solution, but it’s rather more convoluted. You can’t just add a new certificate as you could with the 9500. Instead, you have to create a certificate authority (CA) and use that to sign your mail server’s certificate. Then, instead of registering the mail server certificate with the phone, you register the CA’s certificate. The phone will then trust any certificate that has been signed by the CA.

The procedure is more or less the same for any Symbian S60-based phone and, happily, someone else has done all the legwork.

Follow this procedure and, once again, untrusted certificate warnings will be a thing of the past.

If you have a Nokia N95, see Jules’ comment below for how to add the CA’s certificate after transferring it to your phone.

This entry was posted in Technology. Bookmark the permalink.

1 Response to E90 and untrusted certificates

  1. Jules says:

    Hey.. thanks for this.

    On my Nokia N95, adding a certificate works like this: After saving the .DER on the memory card, use the File Manager to locate it.

    Then “click” on it, answer YES to the “are you sure” question, and you’re done. Bingo 🙂

Leave a Reply

Your email address will not be published. Required fields are marked *