Pocket IE Problem

Hi, I've recently installed a wireless card and everything is working fine.
(using the Prism chipset for Compaq WL110)

But when I try to connect to my University wireless network, Pocket IE gives me "Unable to establish secure connection" ...

I researched this and found a few different links, all redirecting me to the SSL patch.. which I installed, but I think this problem is not an SSL problem.

The network requires authentication via a certificate, using a regular windows machine, just before I connect, I get a "allow this certificate" message, which I must accept.

Pocket IE however just immediately gives me the error mentioned above. I've tried all sorts of patches, most replacing versions of schannel.dll, each with no success though.

My current work around is to authenticate my MAC with the WAP in my laptop, and then quickly move it over to the H/PC, I can then browse web pages with no problems, it's the logging in via this security certificate that is the problem.

Additionally, once I noticed this workaround, I managed to successfully login to https:// secure connections on paypal and ebay, so this adds to my theory that this problem is nothing to do with SSL, after I installed the 128bit SSL patch.

Has anyone ever had this problem? know how I can possibly fix it?

Thanks, /\/\artin

CE 2.0 doesn't support 128-bit SSL.

My appologies... I've posted in the wrong forum...

I'm running Windows CE 3 (2.11 core) on a Jornada 680e.
PIE version 3.0

Ooops

Moved to H/PC Pro Support

You're running Windows CE 2.11, Handheld PC version 3.0x Professional Edition

it could be the problem... that SSL update is starting to be outdated. somewhere (handango?) you can buy some certificate update for 5$. it's not official tho and maybe won't solve the problem.

another idea: search for msafi's posts in this forum. he had this problem too and it was solved

Edited by cmonex 2005-05-03 8:09 PM

Thanks cmonex... I found the post and reading it has been very helpful, I think I have a better understanding of what the problem is being caused by... but I'm lost about one or two things:

In the other post, I understand the security certificates were saved (think I know how to do this), but there was some mention of a registry file, was this created by using the .cer file? I don't understand what to do after I save the .cer

Anyone ?

Martin

I'll convert it for you if you want.
Just e-mail me the .cer

Great ... I'll have to wait until tommorow, I'll email it then ... thanks

By the way, is there any chance you can explain how the conversation takes place, so I can solve this problem in potential future cases?

Mart

yes, i too would like to know about this. thanks

The binary x.509 .cer file needs to be converted into HEX and then dropped into the Registry under the TCP/IP Secure Channel pool.
The security keys are then loaded against the DEC x.509 decryption system in the 128-bit SSL update to provide the secure layer between the public or private key on the server at the other end.

There is a utility which comes with MS SQL Server and MS Exchange server which allows you to do this, which is what I have been using to run the conversion.

Ah ... excellent, thanks for all the info... I really hope this works, otherwise I'm not going to be able to use wireless.

I'll email it tommorow, thanks again

Martin

thanks C:Amie for the explanation

only one detail remains unclear for me: exactly where do you have to put it in the registry?

HKLM\Comm\SecurityProviders\SCHANNEL\

sorry for asking again that's all? what kind of string or whatever kind of value... i'd really like to be able to do this.

hklm\co...\SCHANNEL\CAs\\
CACert (Binary value)
Enabled (dword 1)
Type (dword 1)