Apache SSL Client Authentication with Windows Mobile

The biggest question I have here is if anyone has actually made this work. I would think this would be pretty standard...
On our HTTP server I have protected folders setup with Certificate Based Client Authentication. Each folder requires a unique client certificate.
This works perfectly with IE & Firefox running on PCs.
The problem I have is trying to authenticate a Windows Mobile Device.
I can authenticate the CA certificate but nothing in the client certificate.
In ssl.conf I have the following parameters for each folder:
SSLRequire %{SSL_CLIENT_S_DN_O} eq "Our Organization"
SSLRequire %{SSL_CLIENT_S_DN_CN} eq "User Division Level"
SSLRequire %{SSL_CLIENT_S_DN_OU} eq "User Level"
The only parameter that Apache is able to validate from the device is DN_O and that is coming from the CA certificate.
DN_CN & DN_OU are contained in the user certificate but it is not able to validate those.
Anyone have any ideas on this?
Edited by: Alan3 on Nov 20, 2008 2:15 PM

Bump.
Is anyone out there using Win Mobile devices with Oracle HTTP server?

Similar Messages

Compatibility with Windows Mobile 5.0 ?

Does anyone know if Flex apps would work on PocketPCs, ie.
using Windows Mobile 5.0?
I haven't purchased one yet, so I can't test.
At this link, Adobe identifies Flash Player 7 for Pocket PC:
http://www.adobe.com/products/flashplayer_pocketpc/
This page identifies FlashLite 2.1 which seems to be based on
Flash Player 7
but includes Action Script 2.0 support:
http://www.adobe.com/products/flashlite/
Does anyone know for sure? We'd like to do some monitoring
& reporting
in Flex & make it available on the go for people, but
don't want to go buy the phones
until we know it is possible.
Thanks

>I have a Windows Mobile 5.0 device (Verizon PPC 6700) and
just bought a
>small
> app that requires Flash 6.0. This site talks about 7.0
being the latest
> (and
> being backwards compatible). I installed the app by
placing the .cab file
> on
> my device and clicking on the file...which kicked off an
install program
> on the
> device and it seems to have installed correctly. I
rebooted the device
> but
> don't see any setting / programs for Flash 7.0 (although
it does show up
> in add
> / remove programs). Is this installed correctly? My
purchased app won't
> run
> and it's supported on this device as well....the
developer is blaming
> Flash and
> telling me it's not installed. The Flash 7.0 download
page indicates
> compatibility with Windows Mobile 5.0....any advice?
Can you see this on your device?
http://www.tomorrows-key.com/pdademo/mrttpda.htm
If so, then Flash is installed fine. Note, though, that Flash
content will
only play when viewed in a browser (html file) or when
embedded in an
application using ActiveX or similar. So if you are tryting
to play a swf
file, that won't work.
Steve

Treo 750 with windows mobile 5 and windows 7 compatability

Help please. Can I get a update/download from microsoft for the windows 5 mobile o/s on my treo 750. To make it compatible with windows 7 ?
Post relates to: Treo 750 (AT&T)

Hello everyone. I apologize for reusing this very old post but I got my hands on an old Palm Treo 750 with Windows Mobile 6 working properly but I could by no way get it synchronized via usb with my Windows 7 laptop. I tried the suggested solution but still I get the Device not recognized from the windows installer- Colud you please somehow help me? Many thanks
P.S. I downloaded the program from the link but when launching it as admin nothing happen...

Sync with windows mobile

how can I sync my macbook with windows mobile?

For a Windows Phone 7 you can use this http://itunes.apple.com/us/app/windows-phone-7-connector/id415571499?mt=12
For an 'older' Windows phone 6 this http://www.markspace.com/products/windowsmobile/mac/windows-mobile-sync-software .html
Stefan

Pocket PC 6700 With Windows Mobile Java ISSUE

Somebody Please help me! I bought a Pocket PC 6700 With Windows Mobile 5.0. I am trying to run an ".aspx" java supported extension for my Scottrade streaming quotes screen on my Pocket PC. Is there ANY java programs/downloads/patches, anything that will launch this app. with what I got? Im looking for a solution to this problem. Ive came across some research of it being a liscensing problem but I would think this kind of technology would be taken advantage of at this point with these new pocket PC's
Thanks,
Eric
Message was edited by:
ecw2

Hello,
I've had my PPC 6700 (Windows Mobile 5.0 pone/PDA) for a little over a year now, and I am in the same boat. I am using Bank of America for investing/trading and can not use the online streaming quotes, which is a java based tool for real time stock quotes....
I also have done plenty of research with no success. I have tried several Windows Mobile 5.0 compatible browser like: opera, netfront, etc. but noting seams to do the trick.. Is there a version of Sun Java for Pocket PC's?
Can anyone help?
Message was edited by:
rolyscity

JVM & HP iPAQ with Windows Mobile 2003 SE

Hi,
what kind of JVM can I use on HP iPAQ with Windows Mobile 2003 SE. I don't know what configuration should I use, if CLDC or CDC.
Thanks for replies.

Hi;
For the configuration i think its CDC, as the ipaqs have a big memory as using CLDC, but for the JVM, i don't know,
if you find the answer plz send it to me at [email protected]
good luck.

May i use firefox in my Samsung SGH-i780 with windows mobile 6.0

may i use firefox in my Samsung SGH-i780 with windows mobile 6.0

Sorry, we are not developing Firefox for Windows Mobile.
Firefox is available now for Nokia Maemo phones, and we are working on a version for Google Android phones.
For more information, see:
https://wiki.mozilla.org/Mobile/Platforms

Client authentication with apache+mod_ssl+tomcat

Hello.
My question is a little bit off topic.
I try to read client certificates with request.getAttribute("javax.servlet.request.X509Certificate"), but the result is always null.
Probably it's null because I have nothing on the session. So my tomcat does not have the certificate. I use apache + mod_ssl + mod_jk + tomcat.
And here is my question: how did you configured apache and tomcat so that tomcat has the client cert ?
Thanks.

usually u generate a keystore for client, and mention that in ur SSL connector of tomcat
in apache, we need to configure things in ssl.conf

Issue with Windows mobile accessing to Controller web authenticate page

I have an issue with my customer that use Windows mobile that can't access the web authentication page in the WLC using IE. The error message that it display is "The page can not be found. Website can not be authenticated". When the browser is trying to load the "https://1.1.1.1/login.html". It is workable with opera browser on the same mobile phone. I have try to regenerated the certificate in the WLC but it does not help.
WLC model is 4404, firmware version :4.2. Any one have a solution to this?

In version 4.2 on the controller SSLv2 is disabled by default. IE by default doesn't do SSLv3. Either enable SSLv2 on the controller or SSLv3 on the client.

HP iPAQ 5450 with Windows Mobile 2003 802.1x and certificates.......

This maybe a bit off topic but I am struggling trying to get some answers out of HP.
We have some HP iPAQ 5450/5550's all running Windows Mobile 2003 - to use 802.1x Authentication with PEAP or TLS-EAP we need certificates installing on the PocketPCs. We have a Windows 2000 Active-Directory integrated Certificate Authority that publishes certificates to W2K machines OK - initially HP didn't include any way of importing Certificates but have released the SDK Certificate Enrolment Tool (enroll.exe). We have tried for several days to get a certificate but to no avail and we are struggling to find any information out. Has anyone on here managed this? If so how?
Thanks
Andy

Obviously the WindowsCE devices can't be 'members' of the domain as they would need W2K to do that (create a computer account etc). The enrollment tool is available from HP's website (software & drivers etc). Once I installed the enroll.exe tool I modified the enroll.cfg file to request a 'computer' certificate from my CA, this is now installed and appears in 'Settings, System, Certificates'. I have yet to actually test this with a Cisco AP as I just can't get my hands on one.......
Andy

SSL mutual authentication with Tomcat and IE

Hi,
I am trying to set up mutual ssl with Tomcat.
Everything works fine on the server but I cannot authenticate the client.
The client is my internet explorer browser. This is what I have tried.
-Generated an ssl server certificate using keytool.
-Generated a certificate for the client
-exported it to a .cer file
-imported it to a truststore and moved it into the cacerts file
I have verified this because tomcat lists my client certificate as a trusted
one at start up.
After this I installed the .cer file into IE and tried accessing the server.
Handshake fails: "bad_certificate"
I have searched all around the net trying to find someone who had done something like this, could not find anything. Can anyone please help me through this setup.
-thanks

Oh I find that there is different code base of WLS 7.0.0!!
- WLS 7.0.0 of Mai 2002 is propagating the principal correctly with SSL
mutual authentication.
- WLS 7.0.0 of Juli 2002 is NOT propagating anymore! (the patch is appliable
to this)
Obviously BEA published different nightly builds of the same WLS 7.0.0 on
the web.
Is this normal?
Regards
Alain Hsiung
"Alain Hsiung" <[email protected]> wrote in message
news:[email protected]..
I think that SP1 has a bug: it cannot propagate the principal when SSL
mutual
authentication is used. I fixed it with a small patch. Now the principalis
propagated
correctly with SSL mutual authentication on WLS 7.0.1 (WLS 7.0.0 isworking
without patch).
Alain Hsiung
"Alain Hsiung" <[email protected]> wrote in message
news:[email protected]..
Hi all
I make SSL mutual authentication work between 2 WLS 7.0 servers.
As I upgrade to WLS 7.0 SP1 the principal propagation doesn't workanymore:
the principal on the target WLS is always "anonymous"!
Is this a bug or is there something new to parametrize?
Regards
Alain Hsiung

Address book/Contacts sync with Windows Mobile

Hi.
Curious if anyone has tried getting a Windows Mobile to wirelessly sync with Address Book Server and with iCal Server?
IMAP mail works great, but I have a client with mostly Windows Mobile phones and was wondering if there was a way to do this.
Thanks.

For a Windows Phone 7 you can use this http://itunes.apple.com/us/app/windows-phone-7-connector/id415571499?mt=12
For an 'older' Windows phone 6 this http://www.markspace.com/products/windowsmobile/mac/windows-mobile-sync-software .html
Stefan

Lync 2013 Authenticating with Windows Account Every Minute

Seeing a strange issue with Lync 2013 client logging into my Windows Account about every 1-2 minutes. We are using Lync Server 2013 (on-premise) so it makes no sense that it is logging into and authenticating against Windows Account. This was causing major
issues as my Windows Account password was different than my company domain login. This was causing Lync to use the "wrong" password to login into Windows Account. I changed the passwords to match and now still seeing Lync logging in constantly
into Windows Account.
This is adding up to a LOT of data traffic. Lync should NOT be authenticating every 1-2 minutes into my Windows (Live) Account. Help please!

Hi,
Did the issue happen only for you or for multiple users?
Please exist Lync client, delete user profile on local computer with the following path, then restart Lync client:
%UserProfile%\AppData\Local\Microsoft\Office\15.0\Lync
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Long time wait for authentication with Windows 2003 AD

Hello,
We have a problem with authentication with 2003 AD. If it was no requests from VDI to Windows 2003 AD during some time (10-15 minutes), first request take a lot of time - 3-5 minutes and user need to wait after entering his username/password. Searching users in VDI GUI also take a lot of time in this situation.
How to resolve this? Size of directory is very small.
And with 2008 AD and Open LDAP there is no such problem.

Same thing for 2003, it is called IAS (Internet Authentication Service).
http://www.microsoft.com/technet/network/ias/default.mspx
Basically you will set up IAS with a RADIUS Client which would be your wireless access point(s). Then you will set up a remote access policy which will define how connections are authorized or rejected (windows groups, protocols etc.). Don't forget to register IAS with active directory.

700w not recognized by Vista with windows mobile device center

please help:
i have a treo 700w that doesn't want to consistently connect to machine I am working on. when it works (rarely), it works fine, when it doesn't there is no explanation. I have restarted both computer and phone, and I can't seem to get a connection made.
Further I tried to uninstall/reinstall the windows mobile device center, i have removed the sync profiles on both my computer and phone, but nothing is seeming to work. I find it interesting that vista recognized my Smartphone USB device (it shows in the device manager), but that windows mobile device center doesn't show that anything is connected.
I am connecting via USB, but would be happy to connect via bluetooth, but when i try that approach, it only offers headset/wireless stereo (i'm looking for calendar/contacts/etc).
any direction would be wonderful - i have searched in google and subsequent pages for an hour already, and I'm thinking someone must have a better way.
Thanks,
-cb
PS - for those who are forum administrators, the registration process sucks: the password limitations are oddly strong for a simple forum like this, and when you don't put in a proper password from the get-go, it clears your prior selection of device/os/agreement registration, so when you fix the red flags (the password) and submit, it (and only then) tells you that you've forgotten to answer the questions below (that you had already answered before you were thwarted by the password reqs). sigh.
Post relates to: Treo 700w (Verizon)

Hi AlanG,
I have tried multiple USB connections, and do not have another sync cable. No luck.
Though, your post gave me an idea and that was to use a safety pin to scrape the contacts at the bottom of the phone. I keep the phone in my pocket most of the time, so there was some visible grime, though i would have guessed that the connection could have been made (it wasn't that grimy, just not shiny).
The other thing that was interesting is that when it was plugged in previous to the cleaning it shows the device connected to be a " smartphone usb sync ". Post cleaning, it now shows as a " PocketPC ". I'm not sure what the difference is, nor if I should be hoping that it reads "treo 700w", but hey, can't look a gift horse in the mouth, right?
So, that, in addition with removing all partnerships on both the machine and the treo (and after restarting my phone) it finally connected.
Wow. What a remarkable pain. Let's hope it keeps working.
Post relates to: Treo 700w (Verizon)

Apache SSL Client Authentication with Windows Mobile

Similar Messages

Maybe you are looking for