S/Mime and iOS5 and Google Apps/Exchange – no worky

I’ve been trying to get my s/mime email signing certificate to work under ios5 and i think i’ve found a bug.

If you are trying to send a signed email from your iOS5 device and instead your recipients are receiving an attachment called smime.p7s it is likely that you are using gmail or google apps and are also using the exchange connector in iOS.

My guess is that Google didn’t setup a PKI infrastructure properly and when iOS tries to go a fetch a certificate from the non-existent exchange server the process fails and then an attachment is created.

If you setup your iOS mail account to google via IMAP then smime works as expected.

Filed a bug report with apple – 10302200.

4 thoughts on “S/Mime and iOS5 and Google Apps/Exchange – no worky

  1. I’ve had the same issue using Google Sync and agree with you. It appears to me that iOS 5 tries to fetch a certificate from Google (a service which is not supported). Annoyingly, it does not seem to fallback to any certificates that you may have locally added to the iOS device either.

  2. This is happening to me too. Very annoying-I was looking forward to using my email certs with my iPhone like I do with Lion/mail.app for my business’ email.

    I filed a bug report with apple.

  3. Got an email that my report was a duplicate, so hopefully this will be fixed soon in one of those over the air updates.

  4. I am not using Google Apps but I use 2 GMail accounts on my iPhone, one as Exchange and other as regular GMail. I have a Comodo cert for each one, and it the encryption/signing works in both. It looks like there is a bug for sending signed-only emails as Garth describe, but encrypting and signing works.

    I imported my certificates (.p12) enabling the web share in my mac for a second, and copying the certs there (~myname/xxx.p12) and opening them from my iphone. After installing them, I selected the “Install” option in the certificate info screen (Setting/General/Profiles/) for installing the encryption part of the cert (?). Then just select your SMIME cert in the settings of your email account and activate encrypting/signing and that’s it. You may need to ask you colleague to send you a signed email, open his/her cert and “Install” the encryption part as before.

    The UI and settings definitely need work, but at least it is usable in the mean time.

    I’ll try w/ my iPad tomorrow.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>