Kevin Henrikson » Gadgets

Gmail POP SSL certs for Symbian / Nokia phones

kevin — Mon, 19 Jun 2006 07:05:25 +0000

Connecting to Gmail’s POP (POPS) server always caused a certificate warning on my Nokia E61 Symbian based phone. The solution is to add Google’s Gmail root SSL certificate to the phone. First check the SSL cert that gmail is advertising.

host1:~ kevin$ openssl s_client -connect pop.gmail.com:995 -showcerts CONNECTED(00000003) depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=27:certificate not trusted verify return:1 depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority -----BEGIN CERTIFICATE----- MIIC3TCCAkagAwIBAgIDBZIAMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVT MRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0 aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDUxMTE1MjEyMjQ0WhcNMDcxMTE2MjEyMjQ0 WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMN TW91bnRhaW4gVmlldzEUMBIGA1UEChMLR29vZ2xlIEluYy4xFjAUBgNVBAMTDXBv cC5nbWFpbC5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMP8LCYiLGJ/ RihwcOi1V/zHVTw0Gfu+mI141Vjuuj2DtQoav8emwlXbu8gZoKP9GeMWpX1Vo9qN 4gkslIToHmDnIwGjcaEAfpdhSR9g54Kf5Y7BEXVyco6mTIlpe9vsbV0dmB1FvLP2 1N09dkUJfi7V0fjb8mcn3QYu6+6QNoxPAgMBAAGjga4wgaswDgYDVR0PAQH/BAQD AgTwMB0GA1UdDgQWBBTdASsopgao1m8hcEg0cDZhucltljA6BgNVHR8EMzAxMC+g LaArhilodHRwOi8vY3JsLmdlb3RydXN0LmNvbS9jcmxzL3NlY3VyZWNhLmNybDAf BgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf1DAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQEFBQADgYEAln3/pVqYnUXA1TVGzOqX LFhohGxpuNkr1UJnQmYxmZeB07uPBYRX8c0JXEKs29TmAHRsLhmp8kF36F11Dxgi Xm/Y8I9zgWHoMj7SL3Ve/u8K8K7XcUyUuaWmldLQAREafpFy+f+KYHGuAVh8hjy6 XyPlMCqj+PNp8QXjgOcgO68= -----END CERTIFICATE----- --- Server certificate subject=/C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com issuer=/C=US/O=Equifax/OU=Equifax Secure Certificate Authority --- No client certificate CA names sent --- SSL handshake has read 891 bytes and written 332 bytes --- New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA Server public key is 1024 bit SSL-Session: Protocol : TLSv1 Cipher : DES-CBC3-SHA Session-ID: 19B1FF1A50B6ABCDBB1FEDA198E5C69BC6EA76D1786ECEA5CB845DC2D9BBD6EC Session-ID-ctx: Master-Key: B1AF3801F0742D2EDB52B010EA2497B3D2AA7D38D65313D57CA0BCD67C59C902938E9F274B09BE95026441F313688179 Key-Arg : None Start Time: 1150697367 Timeout : 300 (sec) Verify return code: 21 (unable to verify the first certificate) ---

From this we see the root certificate is from Equifax. This certificate can be found in common root cert bundles but is not shipped by default on Nokia/Synbian phones. For reference here’s the Equifax root certificate.

The next step is to convert the Equifax certs to a format Symbian will accet. Start with putting it in a .pem file.

equifax.pem

Using openssl it can be converted to der format.

openssl x509 -outform DER -in equifax.pem -out equifax.der

equifax.der

The final step is to transfer these certificates to your phone. USB, IR, or Bluetooth will all work for this purpose. You’ll be prompted to add the certificate to your phone. Accepting this will permantly save the cert on your phone for future. Try connecting to gmail to ensure the certificate prompt/warning is no longer displayed.

ref ref2

MacBook Pro getting closer…

kevin — Wed, 07 Jun 2006 07:04:31 +0000

Date/Time

Activity

Location

Details

Jun 7, 2006

2:18 AM

Int’l shipment release

INDIANAPOLIS, IN

Jun 6, 2006

2:02 PM

Departed FedEx location

ANCHORAGE, AK

12:48 PM

Arrived at FedEx location

ANCHORAGE, AK

11:04 AM

Left origin

SHANGHAI CN

11:02 AM

Picked up

SHANGHAI CN

8:55 AM

Package data transmitted to FedEx

Time to switch? – Thinkpad vs. MacBook Pro – Part IV

kevin — Tue, 06 Jun 2006 05:24:13 +0000

The wait is over. I’ve decided to order my MacBook Pro. See the details below. Lenovo decided to drop Linux as a focus for the Thinkpad line. The lack of a well supported Linux/Unix distro further adds reason to move to Mac.

Order Details
Product Name		Product Number	Unit Price	Qty	Subtotal

MBPRO 15/2.16 CTO		Z0DL	$2,899.00	1	$2,899.00
With the following configuration: Processor 0656552 2.16GHz Intel Core Duo Memory 0656107 2GB 667 DDR2 2x1GB SODIMMs Hard Drive 0656106 100GB Serial ATA drive@7200rpm Optical Drive 0656096 SuperDrive (DVDRW/CDRW) Display 0656520 Widescreen Display Modem 0656201 None Apple Software Solutions 0656200 No optional SW Keyboard/Mac OS Language 0656553 BkLit Keyboard/Mac OS Country Kit/AEX 0656102 Airport Extreme Card andBT
Estimated Shipped By:	JUN 07, 2006
Estimated Delivered By:	JUN 12, 2006

Recycle Fee			$8.00	1	$8.00

APPLE PORTABLE POWER ADAPTER85WUSA		MA357LL/A	$79.00	1	$79.00
Estimated Shipped By:	JUN 05, 2006
Estimated Delivered By:	JUN 07, 2006

New Toy – Panasonic 42" Plasma

kevin — Sat, 01 Apr 2006 17:59:14 +0000

Panasonic 42″ Diagonal Plasma HDTV with Built-In ATSC/QAM/NTSC Tuners and SD Memory Card Slot

Deep Blacks, Bright Whites, and 29 Billion Colors
The realism of a TV’s image is strongly linked to its contrast ratio, and this plasma features a high contrast ratio of up to 10,000:12. Such a wide range from black to white means great depth and dimensionality with vibrant colorsand this plasma can display an incredible 29 billion colors for a superior picture. Deep blacks provide excellent shadow detail during dark scenes, while brilliant whites allow our plasmas to render bright scenes with vivid realism.

Origami To Launch @ CeBIT

kevin — Sat, 04 Mar 2006 08:16:34 +0000

Microsoft’s Origami which many are calling the iPod killer is planned to launch at CeBIT. YouTube has a good video which explores some Origami features. The official Origami site is a page right out of Apple’s book. Just enough hype to keep you coming back for more. Reports are that it will run Windows XP, Tablet PC Edition. Intel is expected to reveal more information next week at their developer conference here in San Francisco.