Hi, I am running SqlCE in an application that I'm developing, and to do
replication, I am connecting to a SQL2005 server using https. Because of
this, it wants a valid certificate on the WM device.
What are the best ways to do this? I have played around, and have followed
instructions to put the certifictate root in an XML file and make that a cab
file. Right now, I have my program downloading the cab file, but don't know
how to execute the cab file.
So i guess my question(s) are:
- How do I check to see if a certificate has already been installed?
- Is there a way to install a certificate from within a program?
- How do you execute another file from with a program?
I'm using .net in VS2005, using C#.
Thanks in advance!
- Daniel Robinson
Lochan Pandya - 29 Mar 2006 06:11 GMT
Daniel,
For this, you have to sign your application (exe or dll) with a trusted
certificate or test certificate.
The same certificate needs to be embed in the device too.
This link will help you I suppose:
http://www.codeproject.com/useritems/signcode.asp
Lochan
> Hi, I am running SqlCE in an application that I'm developing, and to do
> replication, I am connecting to a SQL2005 server using https. Because of
[quoted text clipped - 16 lines]
>
> - Daniel Robinson
Daniel Robinson - 29 Mar 2006 16:26 GMT
That's not really what I was looking for. I need for my application to
install certificates automatically. The certificate is not for the app, it's
for replication.
Daniel
> Daniel,
> For this, you have to sign your application (exe or dll) with a trusted
[quoted text clipped - 26 lines]
> >
> > - Daniel Robinson
David Owen - 29 Mar 2006 17:05 GMT
are you sure you don't have some terms mixed up? I connect to SQL through
https all the time; a certificate is required for the web server (to get the
encryption), but nothing is required on the device.
David
> Hi, I am running SqlCE in an application that I'm developing, and to do
> replication, I am connecting to a SQL2005 server using https. Because of
[quoted text clipped - 18 lines]
>
> - Daniel Robinson
Daniel Robinson - 29 Mar 2006 17:26 GMT
Whenever I try to replicate using https on the device, I am not able to. If I
open up pocket IE and try to go to the replication site, it will tell me that
the certificate is not in my trusted sites, are you sure you want to
continue? Apparently this error is making replication in my app not working.
Whenever I manually installed the root certificate of the web server on my
device, then tried to replicate, it worked fine.
Do I have my terms mixed up? Am I going about this the wrong way?
Thanks
Daniel
> are you sure you don't have some terms mixed up? I connect to SQL through
> https all the time; a certificate is required for the web server (to get the
[quoted text clipped - 24 lines]
> >
> > - Daniel Robinson
David Owen - 29 Mar 2006 19:23 GMT
I'm no expert, so I can't say definitively what should / should not work,
but here's how it works in our environment:
after getting the SSL certificate installed on the IIS server, we can
publish the web-site as secure; this is just standard IIS setup-type stuff.
Then, as part of getting replication started, the SSCESA20.DLL must be
exposed and available through your secured web-site; this is the outside
world's connection to your replication instance. Once that's done, you
should be able to open the address of the SSCESA20.DLL from IE on your
desktop, and get prompted for authentication (depending on what type of
authentication you've chosen).
Again, at least in our environment, there's no requirement for a certificate
on the device. We are able to control the process of new devices going out
the door, so part of our release process is to make sure that the device can
hit that DLL and successfully get authenticated.
Hope some of this helps.
> Whenever I try to replicate using https on the device, I am not able to.
> If I
[quoted text clipped - 45 lines]
>> >
>> > - Daniel Robinson
Bill Stelzel [MSFT] - 31 Mar 2006 03:35 GMT
Check out the following blog entries for information on installing
certificates on the device....
How to add your own root cert via CAB file
http://blogs.msdn.com/windowsmobile/archive/2006/01/28/making_a_root_cert_cab_fi
le.aspx
Adding SSL Certificates 201
http://blogs.msdn.com/windowsmobile/archive/2006/02/27/ssl_certificates_201.aspx
Monad trick #2 - creating CertificateStore XML
http://blogs.msdn.com/windowsmobile/archive/2006/03/11/monad_cert_xml.aspx

Signature
Bill Stelzel [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
> I'm no expert, so I can't say definitively what should / should not work,
> but here's how it works in our environment:
[quoted text clipped - 66 lines]
>>> >
>>> > - Daniel Robinson