D:\cURL\ssl>curl -v –cacert mycert.pem -o test.txt
“https://mydomain.mycompany.com/DWNLD.asp?id=128″
* About to connect() to mydomain.mycompany.com:443
* Connected to mydomain.mycompany.com (vvv.xxx.yyy.zzz) port 443
* SSL: error:00000000:lib(0):func(0):reason(0)
* Closing connection #0
curl: (35) SSL: error:00000000:lib(0):func(0):reason(0)

D:\cURL\ssl>

I am using curl-7.10.3 ssl version under Win32.

Here is how I generate mycert.pem from SSL certificate of web site
https://mydomain.mycompany.com:
(a) Open up https://mydomain.mycompany.com using MSIE 5.5
(b) Double click on the lock sign on MSIE status bar
(c) Click on Details tab
(d) Click on “Copy to File” button
(e) Click on Next on Certificate Export Wizard window
(f) Select “Base-64 encoded X.509 (.CER)” and then click on Next
(g) Enter d:\mycert.cer into file name input area
(h) Press Finish button to complete exporting certificate
(i) and finally use openssl to generte mycert.pem file
openssl x509 -in mycert.cer -outform PEM -out mycert.pem

What am I doing wrong here? Can anybody tell me how to get .pem file
from IIS or the secure site itself?

By the way, when I turn off cURL’s certificate verification
(by using -k option instead of –cacert), the above cURL command
runs with no errors.

Thanks a lot,

Here is a test you can do. Go to “https://localhost/exchange” and log into OWA using the BESAdmin account. Then in the address bar, change the URL to “https://localhost/exchange/nameofuser” and press enter. You should now be viewing the user’s mailbox that you are trying to add to the BES server. If you get an error, then this means you do not have Read privilges to the mailbox.

Remember, the BESAdmin needs to have access in Exchange & AD in 3 places:

1. To the root (see #5 in the guide)
2. To the information store (see #6 in the guide)
3. To the user or OU (see #7 in the guide)

Also please verify that the user you are trying to add is not a Domain Admin or Power User. If they are, you are going to have to apply the permissions to the AdminSDholder in the bottom part of the guide.

Jason

Hi

Many Thanks For the prompt reply

I have checked the following previously, my apologies for not adding it to the initial question.

SRP status is Connected
Port 3101 is enabled through ISA
Bbsrptest works 100%

From what I understand the validation process is a mail that is sent back to the server?
Its almost as if the blackberry device cannot get the mail to the server or doesn’t recognise it

First verify that you have a good connection to the SRP (just go the main page and verify it says “Connected”). Then make sure port 3101 is allowed outbound on the ISA server. You must create a new outbound TCP rule on the ISA from the BES server IP to all external. Also verify there are no other firewalls in your organization that may be between the two that could possibly be blocking outbound on this port.

Have you tried telneting to the SRP like I show above? You can also use the bbsrptest tool to check connectivity. It is located in your install path at “C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility”.

Let me know if this works for you.

Jason

Thank you for the info above

I have a SBS 2003 server with ISA 2004 and exchange 2003 loaded. I have installed BPS on it everything seems to work correctly except for the activation part I send the activation mail to the device 8310 click on the setup wizard to create a new email account, select Enterprise install – insert the email address and the key that was generated. It tells me that its activating but does nothing. I run the monitor on isa to see if any traffic comes from the device and nothing. What port is it supposed to come in on?

I would really appreciate some insight

Thanking you in advance