On Tue, Sep 09, 2008 at 06:59:10AM -0400, Charles Marcus wrote:
> On 9/9/2008, Alan Premselaar ([EMAIL PROTECTED]) wrote:
> > Ahh, no, sorry I must have overlooked that part.  I'm just using
> > standard self-signed certificates on the server side.
> 
> Then if this is a 3G iPhone, my last response is the solution.
> 

Sorry for delay picking this up again - it's been so frustrating I needed to 
take a break - have sunk too many hours into it.  To answer the various
questions,  

* I was trying this with the original iphone (have subsequently tested with 3G, 
no difference).  

* I am using self signed certs.  I am trying to use client certs, not just 
server certs.  I have been emailing p12 attachments
via gmail.  My attempts to download mobileconfig from webserver weren't 
successful.

If I understand the various suggestions:

* don't use a self-signed cert (I have made the self-CA and the mail certs 
slightly different),  

* make the public CA cert available via webserver ( I have installed root cert 
via email and that didn't help).

I will try installing root cert via browser and see if that helps.  If that 
fails,  I'll try a proper CA, not
self signed.  I'm sceptical that's the problem.  If all that fails,  I'll just 
throw security overboard and stick
with simple password auth,  life is too short.  I'd still love an error message 
that meant something ;)

Darren

Reply via email to