Kevin Henrikson

Connecting to Gmail’s POP (POPS) server always caused a certificate warning on my Nokia E61 Symbian based phone. The solution is to add Google’s Gmail root SSL certificate to the phone. First check the SSL cert that gmail is advertising.

host1:~ kevin$ openssl s_client -connect pop.gmail.com:995 -showcerts CONNECTED(00000003) depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=27:certificate not trusted verify return:1 depth=0 /C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority -----BEGIN CERTIFICATE----- MIIC3TCCAkagAwIBAgIDBZIAMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVT MRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0 aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDUxMTE1MjEyMjQ0WhcNMDcxMTE2MjEyMjQ0 WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMN TW91bnRhaW4gVmlldzEUMBIGA1UEChMLR29vZ2xlIEluYy4xFjAUBgNVBAMTDXBv cC5nbWFpbC5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMP8LCYiLGJ/ RihwcOi1V/zHVTw0Gfu+mI141Vjuuj2DtQoav8emwlXbu8gZoKP9GeMWpX1Vo9qN 4gkslIToHmDnIwGjcaEAfpdhSR9g54Kf5Y7BEXVyco6mTIlpe9vsbV0dmB1FvLP2 1N09dkUJfi7V0fjb8mcn3QYu6+6QNoxPAgMBAAGjga4wgaswDgYDVR0PAQH/BAQD AgTwMB0GA1UdDgQWBBTdASsopgao1m8hcEg0cDZhucltljA6BgNVHR8EMzAxMC+g LaArhilodHRwOi8vY3JsLmdlb3RydXN0LmNvbS9jcmxzL3NlY3VyZWNhLmNybDAf BgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf1DAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQEFBQADgYEAln3/pVqYnUXA1TVGzOqX LFhohGxpuNkr1UJnQmYxmZeB07uPBYRX8c0JXEKs29TmAHRsLhmp8kF36F11Dxgi Xm/Y8I9zgWHoMj7SL3Ve/u8K8K7XcUyUuaWmldLQAREafpFy+f+KYHGuAVh8hjy6 XyPlMCqj+PNp8QXjgOcgO68= -----END CERTIFICATE----- --- Server certificate subject=/C=US/ST=California/L=Mountain View/O=Google Inc./CN=pop.gmail.com issuer=/C=US/O=Equifax/OU=Equifax Secure Certificate Authority --- No client certificate CA names sent --- SSL handshake has read 891 bytes and written 332 bytes --- New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA Server public key is 1024 bit SSL-Session: Protocol : TLSv1 Cipher : DES-CBC3-SHA Session-ID: 19B1FF1A50B6ABCDBB1FEDA198E5C69BC6EA76D1786ECEA5CB845DC2D9BBD6EC Session-ID-ctx: Master-Key: B1AF3801F0742D2EDB52B010EA2497B3D2AA7D38D65313D57CA0BCD67C59C902938E9F274B09BE95026441F313688179 Key-Arg : None Start Time: 1150697367 Timeout : 300 (sec) Verify return code: 21 (unable to verify the first certificate) ---

From this we see the root certificate is from Equifax. This certificate can be found in common root cert bundles but is not shipped by default on Nokia/Synbian phones. For reference here’s the Equifax root certificate.

-----BEGIN CERTIFICATE----- MIIDIDCCAomgAwIBAgIENd70zzANBgkqhkiG9w0BAQUFADBOMQswCQYDVQQGEwJV UzEQMA4GA1UEChMHRXF1aWZheDEtMCsGA1UECxMkRXF1aWZheCBTZWN1cmUgQ2Vy dGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDgyMjE2NDE1MVoXDTE4MDgyMjE2NDE1 MVowTjELMAkGA1UEBhMCVVMxEDAOBgNVBAoTB0VxdWlmYXgxLTArBgNVBAsTJEVx dWlmYXggU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eTCBnzANBgkqhkiG9w0B AQEFAAOBjQAwgYkCgYEAwV2xWGcIYu6gmi0fCG2RFGiYCh7+2gRvE4RiIcPRfM6f BeC4AfBONOziipUEZKzxa1NfBbPLZ4C/QgKO/t0BCezhABRP/PvwDN1Dulsr4R+A cJkVV5MW8Q+XarfCaCMczE1ZMKxRHjuvK9buY0V7xdlfUNLjUA86iOe/FP3gx7kC AwEAAaOCAQkwggEFMHAGA1UdHwRpMGcwZaBjoGGkXzBdMQswCQYDVQQGEwJVUzEQ MA4GA1UEChMHRXF1aWZheDEtMCsGA1UECxMkRXF1aWZheCBTZWN1cmUgQ2VydGlm aWNhdGUgQXV0aG9yaXR5MQ0wCwYDVQQDEwRDUkwxMBoGA1UdEAQTMBGBDzIwMTgw ODIyMTY0MTUxWjALBgNVHQ8EBAMCAQYwHwYDVR0jBBgwFoAUSOZo+SvSspXXR9gj IBBPM5iQn9QwHQYDVR0OBBYEFEjmaPkr0rKV10fYIyAQTzOYkJ/UMAwGA1UdEwQF MAMBAf8wGgYJKoZIhvZ9B0EABA0wCxsFVjMuMGMDAgbAMA0GCSqGSIb3DQEBBQUA A4GBAFjOKer89961zgK5F7WF0bnj4JXMJTENAKaSbn+2kmOeUJXRmm/kEd5jhW6Y 7qj/WsjTVbJmcVfewCHrPSqnI0kBBIZCe/zuf6IWUrVnZ9NA2zsmWLIodz2uFHdh 1voqZiegDfqnc1zqcPGUIWVEX/r87yloqaKHee9570+sB3c4 -----END CERTIFICATE-----

The next step is to convert the Equifax certs to a format Symbian will accept. Start with putting it in a .pem file.

equifax.pem

Using openssl it can be converted to der format.

openssl x509 -outform DER -in equifax.pem -out equifax.der

equifax.der

The final step is to transfer these certificates to your phone. USB, IR, or Bluetooth will all work for this purpose. You’ll be prompted to add the certificate to your phone. Accepting this will permantly save the cert on your phone for future. Try connecting to gmail to ensure the certificate prompt/warning is no longer displayed.

ref ref2

Well my MacBook Pro arrived. Couldn’t find a binary version of wget for MacOSX 10.4.6 so decided to build it for myself. wget makes easy work of downloading HTTP/FTP items. I needed this to grab some of the certs when trying to get Gmail’s POP over SSL to work on my Nokia E61.

Here’s the copy of wget I built on Mac OS X 10.4.6

The wait is over. I’ve decided to order my MacBook Pro. See the details below. Lenovo decided to drop Linux as a focus for the Thinkpad line. The lack of a well supported Linux/Unix distro further adds reason to move to Mac.

Order Details
Product Name		Product Number	Unit Price	Qty	Subtotal
MBPRO 15/2.16 CTO		Z0DL	$2,899.00	1	$2,899.00
With the following configuration: Processor 0656552 2.16GHz Intel Core Duo Memory 0656107 2GB 667 DDR2 2x1GB SODIMMs Hard Drive 0656106 100GB Serial ATA drive@7200rpm Optical Drive 0656096 SuperDrive (DVDRW/CDRW) Display 0656520 Widescreen Display Modem 0656201 None Apple Software Solutions 0656200 No optional SW Keyboard/Mac OS Language 0656553 BkLit Keyboard/Mac OS Country Kit/AEX 0656102 Airport Extreme Card andBT
Estimated Shipped By:	JUN 07, 2006
Estimated Delivered By:	JUN 12, 2006
Recycle Fee			$8.00	1	$8.00
APPLE PORTABLE POWER ADAPTER85WUSA		MA357LL/A	$79.00	1	$79.00
Estimated Shipped By:	JUN 05, 2006
Estimated Delivered By:	JUN 07, 2006

A quick check of the Technorati top searches reveals World Cup News is starting to heat up in the blogosphere. Less than a week away from the first games and we can already see a steady increase in the *noise*. Take a look at the graph below to see just how often the World Cup is showing up in the news. The blogosphere now more than ever can provide a real-time look into what is hot or going to be hot in the near future. Yahoo has partnered with FIFA to build an official World Cup New site. You can even use tools like Google Desktop to get live World Cup New Updates live.

Well the 17" MacBook Pro’s are starting to arrive. From the reports I’ve read the 17" MBP lack the whine which appears in many of the early production 15.4" MacBook Pro models. There are a few things that are popping up for the first time. Like the lid stays closed better, staying cooler and then there are those who think the 17 inch MBP is still stupid big. Hey what’s to lose… you get more for your money than with the 15". Not to mention an extra 2 inches to help let all the heat out. Personally not sure how much fun it will be to travel with what amounts to a surf board of a laptop. I think it’s clear that the Thinkpad is out. Going to be either a 17" or 15" MacBook Pro. Few more mentions.

Apple released the 17" MacBook Pro last Monday. In Part I of my Apple vs Thinkpad post I mentioned a few reasons why I’m strongly considering the MacBook Pro. The 17" model adds Firewire 800, 8x super Drive, and obviously a larger screen. If Apple had just added the option for a speed bump in the Core Duo it may have just been the tipping point.

A few more reviews.

On a side note the MacBook Pro is seeing more and more applications get ported to native Intel and/or Universal support. Just one more feather in the MacBook’s hat.

Firefox is a very extensible browser. Here’s a list of top Firefox extensions. These are the Firefox browser extensions that are most popular and have the highest number of downloads. Download your favorite today.

Download Firefox Top Extensions

* FlashGot
* NoScript
* Fasterfox
* Tab Browser
* IE Tab
* Forecastfox
* Tab Mix Plus
* Filterset.G Updater
* downTHEMall!
* StumbleUpon

For more information on Firefox and to search for additional extensions goto https://addons.mozilla.org/firefox/extensions/

Download Firefox for Security On an internet filled with spyware Mozilla Firefox is looking out for you. Its built in popup blocker makes sure you aren’t bothered by annoying and explicit popups while you surf the web. Mozilla Firefox has also been shown to be far less at risk to Spyware. If you are using a different browser and are concerned about your safety online, and the security of your personal information and computer then you should download Firefox immediately and see the difference it makes. Firefox also has a built in updater that notifies you once updates for Firefox become available. Downloading these updates is quick and simple, and immediately your browser has been updated and the known vulnerabilities have been fixed.

Download Firefox for Customizability Mozilla Firefox is the most customizable browser to date. The look and feel of Firefox can be set to match the theme of your computer, or to anything you wish with Firefox Themes. Why settle for having your browser looking the same as any other boring old program? Make your desktop and browser unique by choosing a theme that fits you, arrange the toolbars however they work best for you, and fine tune your settings to get Firefox running exactly how you want it. Customizing Mozilla Firefox is fun, easy, and makes your life that much better.

I’ve been an IBM Thinkpad user for the last ~7 years. By and large they’ve been good to me. I think in those 7 years I’ve had 6 different Thinkpads. On average one a year. Only two failures to speak of; the first a hard drive failure on my T20 which had been whining for weeks so I had good backups. The 2nd a screen failure when an airport screener (one of those new anal post-9/11 types) dropped it taking it over to the bomb residue tester. So for 7 years of heavy laptop use not a bad record. However more and more I’ve got my eye on making the switch to Apple. Thinking back; my first ever computer that I did any *real* work on was an Apple IIe. Wrote some LOGO programs in an after school computer class. Today my first reason to consider the Mac is that my day-to-day work can all be done(I think) without the support of Windows or Linux as my primary OS. Using Windows as my primary desktop for more than a decade has I’m sure left some scars. However most of what I do these days can be moved to just about any modern OS. Let’s see… Web based AJAX email, calendar, and contacts client. Thunderbird for offline IMAP mail. IDEA for software development. Firefox for web programming and surf’n the net. FTP, SSH, WinZip, etc. Lots of little productivity tools that can be replace in any OS. So for the most part being internet connected a bulk of the time let’s me do most things on the web.

The second reason is a common one echoed by geeks around the blog-sphere and the net. OSX is more secure, it’s Unix, it s *real OS*, it’s got nice UI candy, yadda yadda yadda. Nothing new there but for the most part I agree. The third and key factor is that Mac laptops have finally caught up speed wise with Apple’s switch to the Intel chips. For years the even the highest end Apple laptops suffered severe lags in performance compared to their IBM counterparts. For a developer or someone who uses a laptop for more than just a word processor and internet kiosk this is a huge deal. Before the MacBook Pro it just wasn’t feasible to use a Mac laptop as your primary machine if you wanted to get the most performance. The forth and final reason I’ve identified is that in my space and geek space in general an Apple is just cooler than a Windows machine. Ok so this is hard to prove and it’s a bit of a religious topic but I had to add it. So with that my delima begins. To Mac or not to Mac? Stick with Thinkpad and the new Core Duo T60’s or leave IBM (ahem.. Levono) behind and take the plunge with MacBook Pro?

I’m obviously not the only person looking at this issue.

What do you think?

Well Asa has decided to take a job with Firefox rival Opera…………………………… Just after his don’t be a fool post. Nice one!

read more | digg story