Author Topic: Authentication against Exchange with client certificate  (Read 4666 times)

Sifl

  • Newbie
  • *
  • Posts: 1
Authentication against Exchange with client certificate
« on: September 23, 2016, 01:10:04 pm »
Hi everyone,
is there a way to use client certificates for authentication against a Exchange-Server?
I couldn't find it...

Thank you,
Simon

StR

  • Hero Member
  • *****
  • Posts: 1558
Re: Authentication against Exchange with client certificate
« Reply #1 on: September 23, 2016, 04:06:16 pm »
I believe it is not possible in Aquamail.

I am not even sure: can Outlook-Mobile app do that?

Besides, from what I understand it might not be that easy/straight forward to even enable/configure certificate-based authentication (CBA) via Exchange Web Services (EWS) on the serverside. Aquamail is using EWS protocol to connect to Exchange servers.
See e.g. here: https://social.technet.microsoft.com/Forums/windowsserver/en-US/7fdc543b-c953-4501-9365-b6273411b762/is-it-possible-to-use-certificate-based-authentication-with-the-exchange-web-services-virtual?forum=exchangesvrdevelopment
https://blogs.msdn.microsoft.com/webdav_101/2015/05/11/best-practices-ews-authentication-and-access-issues/
(You can see the comment in the latter page, - people have problems finding how to do CBA.)

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Authentication against Exchange with client certificate
« Reply #2 on: September 23, 2016, 08:58:47 pm »
Sorry this is not supported.

I don't think there are any issues with EWS specifically, just not something I've done.

Sorry.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

orang

  • Newbie
  • *
  • Posts: 2
Re: Authentication against Exchange with client certificate
« Reply #3 on: May 16, 2017, 08:12:18 pm »
Sorry to resurrect an old thread, but this is one thing keeping me and my colleagues and possibly our organization from using this e-mail client! Any chance this becoming a reality??

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Authentication against Exchange with client certificate
« Reply #4 on: May 16, 2017, 11:06:02 pm »
There is always a chance and it's filed in our task tracker but so far has not been picked up for development. Sorry.

Yes we are aware that client cert auth is "out there".

Do you use a client cert in combination with a password -- or without one (the cert is self-sufficient)?
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

orang

  • Newbie
  • *
  • Posts: 2
Re: Authentication against Exchange with client certificate
« Reply #5 on: May 16, 2017, 11:12:33 pm »
We're using cert only. Hope it gets implemented. It's a great app you got here, would love to use it more :)

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Authentication against Exchange with client certificate
« Reply #6 on: June 02, 2017, 03:03:10 pm »
Re: We're using cert only. Hope it gets implemented. It's a great app you got here, would love to use it more

Just started working on this for the next version - 1.11.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12740
Re: Authentication against Exchange with client certificate
« Reply #7 on: June 07, 2017, 05:32:13 pm »
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/