Koozali.org: home of the SME Server

Secure SMTP on Android Phones

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Secure SMTP on Android Phones
« on: September 07, 2011, 02:39:54 PM »
Anyone managed to get outgoing via SMTP on SME working on an Android phone?

Have been asked to setup HTC Desire and using SME Mail with IMAPs - incoming is working great but the default mail client has a problem with the certificate for outgoing and never completes setup. Their tech replied ;

"We recommend you ask your IT department to export your certificates in a format that Android 2.1 supports, i.e., .p12. You should then be able to install them from your microSD card."

Other forums suggest using K9 Mail app instead as it doesnt have said issue of default client - but K9 crashes!

Any help / suggestions welcome - and yep, Im getting out of my depth on this!
"If you don't know what you want, you end up with a lot you don't."

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Secure SMTP on Android Phones
« Reply #1 on: September 07, 2011, 02:42:56 PM »
"We recommend you ask your IT department to export your certificates in a format that Android 2.1 supports, i.e., .p12. You should then be able to install them from your microSD card."

did you try this way?

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Secure SMTP on Android Phones
« Reply #2 on: September 07, 2011, 02:50:50 PM »
Not yet - this seems like a rather daunting operation and I was kinda hoping there might be an easier way that someone may have come across?
"If you don't know what you want, you end up with a lot you don't."

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Secure SMTP on Android Phones
« Reply #3 on: September 07, 2011, 03:41:13 PM »
Firefox -> Edit -> Preferences -> Advanced -> Encryption-> View Certificates

select your certificate, and choose "save" (maybe export).. et voilĂ 

Offline larieu

  • *****
  • 214
  • +0/-0
Re: Secure SMTP on Android Phones
« Reply #4 on: September 07, 2011, 03:45:15 PM »
I have at least 20~30 android devices which work ok on my SME server (SME8B6)

please pay attention at Outgoing settings
you'll need to set
server : your.server-name.dom
port :465
security type : SSL (accept any)
check "require sign-in
username : your_username
pass: Y0ur_pa$5word

also in incoming that "SSL (accept any) is mandatory

in this way yo'll no tneed to import into device
if everybody's life around you is better, probably yours will be better
just try to improve their life

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Secure SMTP on Android Phones
« Reply #5 on: September 07, 2011, 03:48:55 PM »
@larieu: yes, thats excatly what I have. Works fine on iphone - but not android

@stefano: will try that - then, to tx to sd card and then do an import on the phone ... no idea how to do this on an android phone currently lol!
"If you don't know what you want, you end up with a lot you don't."

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Secure SMTP on Android Phones
« Reply #6 on: September 07, 2011, 03:58:01 PM »
@stefano: in FF the export button is greyed out when I choose the SME box cert :(

Actually just found how to export as x.509 PEM - suspect though that it has to be .p12 is it?

Also just found ;

http://www.tfproject.org/tfp/tilted-technology/140412-how-export-ssl-certificate-linux-windows-iis.html

but where is relevant .key / .crt files located on sme?
« Last Edit: September 07, 2011, 04:03:07 PM by gbentley »
"If you don't know what you want, you end up with a lot you don't."

Offline larieu

  • *****
  • 214
  • +0/-0
Re: Secure SMTP on Android Phones
« Reply #7 on: September 07, 2011, 07:42:38 PM »
gbentley

what version of android you have?
I have tested this on
1.6 ~ 2.2
worked each time
and I have remebered my frst Galxy (1.52 if I'm not wrong) had similar problem
but it was solved by recreating the account with all correct settings and at first sent I was asked to view the certificate and accepted with a permanent option
if everybody's life around you is better, probably yours will be better
just try to improve their life

Offline mdo

  • *
  • 355
  • +0/-0
Re: Secure SMTP on Android Phones
« Reply #8 on: September 07, 2011, 08:33:25 PM »
FYI
We use K9 mail app on all Android devices without any such problem.
...

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Secure SMTP on Android Phones
« Reply #9 on: September 07, 2011, 11:57:24 PM »
@larieu: not sure of version but these phones have only just been delivered ;

Motorola Defy, HTC Desire and Wildfire.

Tried deleting account entirely, switching off and starting again, never get asked about cert.

@mdo: tried K9 which rcvs ok [as does default client] but crashes on send.
"If you don't know what you want, you end up with a lot you don't."

Offline larieu

  • *****
  • 214
  • +0/-0
Re: Secure SMTP on Android Phones
« Reply #10 on: September 08, 2011, 06:39:48 AM »
do you use default connection of your provider (3G, ...) or you usw WiFI?

try also by wireless
it could be an filtered port by your mobile provider
for example I knew that in my country I am not able to use all ports everywhere
- http(s),SMTP(S), IMAP(S),POP3(S) works everywhere
but the rest it depends on the place you are
for exampke MRDP or PPP don't work everywhere (tried 3 and 2 g - if I go in the same place I have the same problems - the provider response was that interent means http(s) the rest of services are "best effort")


please make all settings into one WiFI trusted network (trusted means no ports filtered)
if everybody's life around you is better, probably yours will be better
just try to improve their life

Offline gbentley

  • *****
  • 482
  • +0/-0
  • Forum Lurker
    • Earth
Re: Secure SMTP on Android Phones
« Reply #11 on: September 08, 2011, 08:57:50 AM »
As above - its working perfectly on the iphones ???

Just started reading about certificates - does anyone think it might be worth generating a new self signed for say 5 years?

This is a two year old box thats been constantly updated to latest sme.
« Last Edit: September 08, 2011, 08:59:51 AM by gbentley »
"If you don't know what you want, you end up with a lot you don't."

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: Secure SMTP on Android Phones
« Reply #12 on: September 08, 2011, 12:23:13 PM »
gbentley

Quote
Just started reading about certificates - does anyone think it might be worth generating a new self signed for say 5 years?

It's easily done, see
http://wiki.contribs.org/Certificates_Concepts
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.