I was setting up push mail to https://mail.example.com when I got this message. The solution (brace yourself)
- openssl s_client -connect email.examile.com:443
- Copypaste the lines between and including -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- to a .pem file
- openssl x509 -outform der -in certificate.pem -out certificate.der
- You need the whole trust chain, however, so in my case I needed the GlobalSign Root CA, which provides a DER file too
- Copy your der files to the phone
- In the phone file manager, click them and install them.
If the chain is longer than two? I have no idea.
This is a good post, thanks for sharing! I will come back next time!
Innovation always implies the risk of failure. The pressure on developers is huge to minimise that risk and make the first prototype work. In the real world, times of crisis such as these may limit the willingness of companies to take risks in the areas of research and development.