iPhone not compatible with IMAP using TLS ?

I am wondering if the iPhone is actually compatible using secure logon with TLS requirement.

Basically my Exchange server (using a valid SAN certificate) is configured to allow only TLS connections when using IMAP (x.509 certificate name is valid via the certificate) but the iPhone seems to be the only device not being able to connect to it.

I can setup Outlook just fine to connect to the server via IMAP and TLS, but both, the first iPod touch and the iPhone 4 refuse to connect to it.

The odd thing is, that it is complaining about not being able to connect via SSL, if you ignore it, and acknowledge the setup anyway, it complains about the wrong credentials ...

Anyone seen this before ?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

tiersten

Gomjaba wrote: »

I am wondering if the iPhone is actually compatible using secure logon with TLS requirement.

Yup. Works fine. Tried it before.

What does your IMAP server say in the logs?

jibbajabba

tiersten wrote: »

Yup. Works fine. Tried it before.

What does your IMAP server say in the logs?

Looked for a while now, but I can't seem to find the logs lol

Edit: I think I found 'em

jibbajabba

Gomjaba wrote: »

Looked for a while now, but I can't seem to find the logs lol

I am being stupid probably - where can I find them ?

tiersten

Gomjaba wrote: »

I am being stupid probably - where can I find them ?

No idea. I'm not an Exchange person.

jibbajabba

tiersten wrote: »

No idea. I'm not an Exchange person.

Fair, I did find out what the issue was though. There was a typo in the firewall rule, still blocking port 993 - why it worked in Outlook is beyond me as port 993 was deffo not open ..

Works anyway which is the main thing ..

tiersten

Gomjaba wrote: »

why it worked in Outlook is beyond me as port 993 was deffo not open ..

You can do TLS over the regular IMAP port if the server supports it by sending the STARTTLS command first.

jibbajabba

tiersten wrote: »

You can do TLS over the regular IMAP port if the server supports it by sending the STARTTLS command first.

Ah, gotcha .. thanks