[isalist] Re: ISA - Certificates and Windos Phone 7

  • From: D PIETRUSZKA USWRN INTERLINK INFRA GM <DPietruszka@xxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 18 Feb 2011 14:48:08 +0000

Thanks Jim

Regards
Diego R. Pietruszka
MIS - General Manager
MSC (USA) - Interlink Transport Technologies
Direct Phone: (908)605-4147

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jim Harrison
Sent: Friday, February 18, 2011 9:43 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA - Certificates and Windos Phone 7

There's nothing you can do at ISA to change how a client trusts a certificate.
This KB<http://support.microsoft.com/kb/915840> worked for WM5, but I don't 
think it'll work for WM6 or 7.
Basically, because the certificate store is accessible only to an app built by 
your phone provider, it's them you have to work with.

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA GM
Sent: Thursday, February 17, 2011 12:46 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA - Certificates and Windos Phone 7

Hello all

I have a question regarding all those 3 components.
On the company we are migrating from BB to Windows Phone 7. That means, a 
couple of applications that are running on the BBs needs to now run on WP7.

The application with issues is making a HTTPS call to a website (if you access 
the website from IE works fine). But the application basically is ending the 
connection because of an untrusted certificate (we use COMODO certificates for 
public sites).
I was told, the apps part of WP7 only check if the root certificate of the cert 
used on the site is on the trusted list. But if there is any intermediate 
certificate, then the ISA or whatever is publishing the site needs to be 
provided.

From my limited knowledge of the product, that is not doable and is also not 
secure. But I can be wrong of course.
Can anybody tell me if that is possible and if it is, how I can offer an 
intermediate certificate on a web site published with ISA 2006?

Thanks in advance

Regards
Diego R. Pietruszka

Other related posts: