Mail certificate not valid on WP7

Forums › Windows Phone and Windows Mobile › Mail certificate not valid on WP7

jbard

1370 posts

Uber Geek

# 108434 29-Aug-2012 13:11

Hi

I have a Nokia Lumia 710 running WP7.5.

I recently moved my mail server and ever since then the 4 email accounts (different domains) won't sync email. I get this message: "The certificate from mail.mydomain.co.nz is not valid. Do you want to continue?"

If I click continue the message pops up 2-3 seconds later in a constant loop so I can't check mail.

As far as I know nothing is wrong with my mail certificate, emails have worked fine on Windows Live Mail, Thunderbird and my Android phone since the change over.

I have tried deleting and adding the email accounts again in WP7 but that didn't help. The problem occurs on WIFI and 3G.

Does anyone have any ideas I could try, is their an alternative WP7 email client?

1 | 2

275 posts

Ultimate Geek

# 678709 29-Aug-2012 13:20

If this occurs on a PC, the usual issue is due to time/date incorrect. Make sure these details and the correct time-zone is ok on your phone.

"The Atlantis base, brings greetings from the pegasus galaxy, you may cut power to the gate!."- Dr Weir (Rising) New Zealand · Luke.Geek.NZ

jaymz

1091 posts

Uber Geek

# 678741 29-Aug-2012 14:08

I noticed this on a few sites in the past. Mainly sites who didnt purchase a SSL Cert when upgrading to Exchange 2010.

I use the following website to test active sync and things:

www.testexchangeconnectivity.com

This may no be applicable in your case (not sure if you are using POP or even Exchange)

The other test i do to confirm the cert is ok, is to navigate to the OWA address (mail.domain.co.nz/owa or mail.domain.co.nz/exchange) and see if Internet explorer prompts about invalid certificate. I do this on both the phone and my lapotp.

Would it be possible for you to let us know the domain? so I can test the certificate from my end?

jbard

1370 posts

Uber Geek

# 678748 29-Aug-2012 14:19

ChevronX: If this occurs on a PC, the usual issue is due to time/date incorrect. Make sure these details and the correct time-zone is ok on your phone.

Phone and server both report the correct timezone, I'm not sure why this would cause problems anyway?

jaymz

1091 posts

Uber Geek

# 678749 29-Aug-2012 14:21

jbard:
ChevronX: If this occurs on a PC, the usual issue is due to time/date incorrect. Make sure these details and the correct time-zone is ok on your phone.

Phone and server both report the correct timezone, I'm not sure why this would cause problems anyway?

If the time and date are out by enough then the certificates can show as "expired"

jbard

1370 posts

Uber Geek

# 678750 29-Aug-2012 14:21

jaymz: I noticed this on a few sites in the past. Mainly sites who didnt purchase a SSL Cert when upgrading to Exchange 2010.

I use the following website to test active sync and things:

www.testexchangeconnectivity.com

This may no be applicable in your case (not sure if you are using POP or even Exchange)

The other test i do to confirm the cert is ok, is to navigate to the OWA address (mail.domain.co.nz/owa or mail.domain.co.nz/exchange) and see if Internet explorer prompts about invalid certificate. I do this on both the phone and my lapotp.

Would it be possible for you to let us know the domain? so I can test the certificate from my end?

Hi

They are all simple POP accounts. The domain is it4kids.co.nz - I have no experience with mail certificates this was already configured on my VPS. If you know of something I should be checking that would be really helpful?

Cheers

jbard

1370 posts

Uber Geek

# 678751 29-Aug-2012 14:22

jaymz:
jbard:
ChevronX: If this occurs on a PC, the usual issue is due to time/date incorrect. Make sure these details and the correct time-zone is ok on your phone.

Phone and server both report the correct timezone, I'm not sure why this would cause problems anyway?

If the time and date are out by enough then the certificates can show as "expired"

Ahh ok that makes sense. This would happen on my PC as well as the phone if this was the case though?

billgates

3934 posts

Uber Geek

Trusted

# 678753 29-Aug-2012 14:24

You can try download your certificates, emails them to yourself to a mail account which is configured on the phone as an attachment and download and install on the phone if they are not verified certificates.

Do whatever you want to do man.

jaymz

1091 posts

Uber Geek

# 678755 29-Aug-2012 14:30

jbard:

Ahh ok that makes sense. This would happen on my PC as well as the phone if this was the case though?

Only if your phone and PC were set to the same time and date :)

Is there any SSL settings when you setup the POP3 account on the phone? POP3 is a bit different from active sync (which i have had more experience with)

jbard

1370 posts

Uber Geek

# 678758 29-Aug-2012 14:35

jaymz:
jbard:

Ahh ok that makes sense. This would happen on my PC as well as the phone if this was the case though?

Only if your phone and PC were set to the same time and date :)

Is there any SSL settings when you setup the POP3 account on the phone? POP3 is a bit different from active sync (which i have had more experience with)

No the mail accounts don't use SSL.

freitasm

BDFL - Memuneh
64196 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

# 678760 29-Aug-2012 14:38

The mail client wouldn't ask for a certificate if it was not configured to use a secure connection. Something is wrong in the settings... Double checked?

My technology disclosure | Digital Transformation | Enterprise Content Management | Customer Relationship Management | Data Insights, Business Intelligence and Advanced Analytics

jbard

1370 posts

Uber Geek

# 678766 29-Aug-2012 14:42

freitasm: The mail client wouldn't ask for a certificate if it was not configured to use a secure connection. Something is wrong in the settings... Double checked?

The settings on the phone? I have double and triple checked these. I have recreated the accounts 2 -3 times now and as I mentioned these were all working fine before the server changeover and other mail programs didn't need their settings updated.

PhilM

55 posts

Master Geek

# 678778 29-Aug-2012 15:05

billgates: You can try download your certificates, emails them to yourself to a mail account which is configured on the phone as an attachment and download and install on the phone if they are not verified certificates.

This worked for me when I was setting my exchange account up.
After installing the certificate I think I also had to restart the phone as well. I did this quite a while ago, but I think it was all pretty straight forward.

jbard

1370 posts

Uber Geek

# 678780 29-Aug-2012 15:08

PhilM:
billgates: You can try download your certificates, emails them to yourself to a mail account which is configured on the phone as an attachment and download and install on the phone if they are not verified certificates.

This worked for me when I was setting my exchange account up.
After installing the certificate I think I also had to restart the phone as well. I did this quite a while ago, but I think it was all pretty straight forward.

I'm not sure on this, but as far as I know if you aren't using SSL POP3 accounts don't have certificates?
If they do I would have no idea where to find them on my server?

jaymz

1091 posts

Uber Geek

# 678782 29-Aug-2012 15:14

jbard:
No the mail accounts don't use SSL.

I cant do much testing unfortunately.

Do you have access to the mail server, and would you be able to setup a test account for me? (PM details of course)

I have access to a Nokia Lumia 610 here, so could run a test for you?

jbard

1370 posts

Uber Geek

# 678783 29-Aug-2012 15:15

jaymz:
jbard:
No the mail accounts don't use SSL.

I cant do much testing unfortunately.

Do you have access to the mail server, and would you be able to setup a test account for me? (PM details of course)

I have access to a Nokia Lumia 610 here, so could run a test for you?

I have just setup a test account freitasm is testing on his Lumia 800 now. Thanks for the offer.

1 | 2