[Cixert]

To get email on Blackberry OS without BIS I have needed to set it up in a pub drinking some beers.
Here is the result (uffff, spiritual snort)

LOGICMAIL APP

-It works to visualize HTML messages
-It does not work to receive mail with SSL ports.

-Wanadoo.es (Orange now):
pop.wanadoo.es:
-Yes it works without security on port 110
-It doesn´t work without security ports 143-993-995
-It doesn´t work SSL ports 110-143-993-995
-It doesn´t work TLS ports 110-143-993-995 (stops, asks for authentication and does not go)

smtp.wanadoo.es
-It doesn´t work without security ports 25-465-587 (it connects but when sending a message it says error in the address @ of the recipient)
-It doesn´t work Plain / Login / Cram-MD5 with SSL ports 25-465-587
-It doesn´t work Plain / Login / Cram-MD5 with TLS ports 25-465-587

-Gmail:
pop.gmail.com:
-It doesn´t work without security ports 110-143-993-995
-It doesn´t work SSL ports 110-143-993-995
-It doesn´t work TLS ports 110-143-993-995

imap.gmail.com:
-It doesn´t work without security ports 110-143-993-995
-It doesn´t work SSL ports 110-143-993-995
-It doesn´t work TLS ports 110-143-993-995 (stops, asks for authentication and does not go)

smtp.gmail.com:
-Yes it works Plain / Login with TLS ports 587
-It doesn´t work without security ports 25-465-587
-It doesn´t work Plain / Login / Cram-MD5 with SSL ports 25-465-587
-It doesn´t work Plain / Login with TLS ports 25-465
-It doesn´t work Cram-MD5 with TLS ports 25-465-587

-Hotmail (Outlook.com now):
pop-mail.outlook.com:
-It doesn´t work without security ports 110-143-993-995
-It doesn´t work SSL ports 110-143-993-995 (stops, asks for authentication and does not go)
-It doesn´t work ports 110-143-993-995

imap-mail.outlook.com
-Yes it works TLS port 143
-It doesn´t work without security ports 110-143-993-995
-It doesn´t work SSL ports 110-143-993-995
-It doesn´t work TLS ports 110-993-995

smtp-mail.outlook.com
-Yes it works Plain / Login with TLS port 587
-It doesn´t work without security ports 25-465-587
-It doesn´t work Plain / Login / Cram-MD5 with SSL ports 25-465-587
-It doesn´t work Plain / Login with TLS ports 25-465
-It doesn´t work Cram-MD5 with TLS ports 25-465-587

MUJMAIL APP

-It doesn´t work with HTML messages
-Yes it works with SSL ports on POP3 and IMAP configured as «Use mujMail SSL»
-It doesn´t work with SSL ports configured as "Use SSL firmware"
-I have not yet learned how to download IMAP folders (if possible)

The question is ... Why do not you work on the mail servers Blackberry SSL and yes it works mujMail SSL of the year 2009, as well as Outlook Express SSL of the year 2003?

[Dunt Dunt Dunt]

The question is ... Why do not you work on the mail servers Blackberry SSL and yes it works mujMail SSL of the year 2009, as well as Outlook Express SSL of the year 2003?

Because there is no money in patching up software from back then... BlackBerry stop sell phones that ran BBOS over five years ago, they feel their obligation to support those users is past.

Might as well ask why Microsoft doesn't patch Windows XP anymore...

[Cixert]

Because there is no money in patching up software from back then... BlackBerry stop sell phones that ran BBOS over five years ago, they feel their obligation to support those users is past.

Might as well ask why Microsoft doesn't patch Windows XP anymore...

I ask for the technical principles of operation. The question concerns how the code programmed in the Blackberry OS firmware SSL works with the email servers.
The rest I already knew, thank you.

[Chuck Finley69]

I ask for the technical principles of operation. The question concerns how the code programmed in the Blackberry OS firmware SSL works with the email servers.
The rest I already knew, thank you.

I believe something was lost in translation with your original question. Your original question read as if you questioned lack of BlackBerry support.

[Cixert]

Because there is no money in patching up software from back then... BlackBerry stop sell phones that ran BBOS over five years ago, they feel their obligation to support those users is past.

Might as well ask why Microsoft doesn't patch Windows XP anymore...

I believe something was lost in translation with your original question. Your original question read as if you questioned lack of BlackBerry support.

I apologize, I had some very serious spelling errors.
I am Spanish and sometimes I use the Google translator.
This website has a bad habit of changing personal pronouns in the translation.
I hope that now it is understood:
The question is ... Why does not it work on the mail servers Blackberry SSL and yes it works mujMail SSL of the year 2009, as well as Outlook Express SSL of the year 2003?

[Chuck Finley69]

I apologize, I had some very serious spelling errors.
I am Spanish and sometimes I use the Google translator.
This website has a bad habit of changing personal pronouns in the translation.
I hope that now it is understood:
The question is ... Why does not it work on the mail servers Blackberry SSL and yes it works mujMail SSL of the year 2009, as well as Outlook Express SSL of the year 2003?

No apology is necessary. I believe some of the code-ware you reference is proprietary and not shared.

[Cixert]

I am trying to find out if the SSL configuration depends on certain certificates to be able to authenticate with the server.
From that I read, Gmail used the Thawte certificates a few years ago
https://www.thawte.com/roots/
and Equifax de Geotrust
https://www.geotrust.com/resources/r..._Authority.cer
but this last one I read here that is obsolete
https://www.geotrust.com/resources/r...s/retired.html
So I have to find out that certificates Gmail currently uses.

EDIT:
I continued looking for a solution. Google web uses the root certificate "Global Sign Root CA - R2" (by the serial number I think it's the same as "GlobalSign Root CA 2028")
I read this post with the same problem:
https://forums.crackberry.com/blackb...sslv3-1082389/
For the moment I have updated the certificates but it still does not work:
1. Connected the phone to a Wi-Fi network and closed the applications plug the USB cable to the computer connected to the Internet and run BB Desktop Software.
2. Tools + Options + Certificates = certificates appear in the main left tab.
3. Click on Certificates from the main menu
4. Enter any password.
5. Wait a few seconds until phone certificates are recovered
(if it takes more than 5 minutes there is an error, close and repeat the process)
6. You must select the certificates check boxes that are not installed in BBOS (except expired ones)
7. In the «main» option select «Synchronize the certificates»
8. Wait until the phone restarts.

I think the problem is on the intermediate certificate "Google Internet Autorithy G3", Windows is using it but it does not appear in the certificate console so it does not synchronize.
My Blackberry OS has the expired intermediate certificate "Google Internet Autorithy G2".

EDIT 2:
In this site the problem is explained (to see it from BB browser Let's Encrypt certificate is required)
https://textslashplain.com/2017/10/2...-authority-g3/
but the proposed solution does not work nor does the test work
https://good.gsr2demo.pki.goog/
After manually copying the text of the last link corresponding to Google Internet Authority G3, the certificate is installed but the status is "unknown string status"
Trying another method like exporting it manually from the Windows navigator happens the same error.
In addition both intermediate certificates although supposedly with the same name really are different.
Just the same mistake happens with Let's Encrypt certificate.

[Cixert]

I conclude that the connection errors are due to an error on negotiation protocol.
I can not rule out an error on the certificate chain but my Blackberry currently has all the certificates installed and LogicMail with Gmail still does not work.
I will publish a package with all the certificates updated here:
https://forums.crackberry.com/blackb.../#post13227865
If the problem is on the certificates the Blackberry Log (on debug mode) would issue a message type: Certificate_error
By cons the errors of the logs with Gmail are varied, for the most part they are:
( I highlight the error SSLAlertProtocol - SSL: R270 but I do not see it in the SSL protocol specification RFC 6101 https://tools.ietf.org/html/rfc6101 )
--------------------------------------
POP SSL
W net.rim.networkapi - FatF net.rim.device.cldc.io.ssl.TLSIOException(net.rim. device.api.crypto.tls.TLSAlertException) - 7/7 01:57:06
W net.rim.networkapi - Fatf 1 - 7/7 01:57:06
¿ net.rim.tcp - disc 1 - 7/7 01:57:06
¿ SSLAlertProtocol - SSL: R270 - 7/7 01:57:06
------------------------------------
IMAP TLS
W net.rim.networkapi - FatF java.io.IOException: Timed out - 7/7 02:24:51
--------------------------------------
IMAP TLS (other)
E net.rim.device.api.io.nfc - PIOE Thread 2 unable to open connection: Connection was interrupted - 7/7 02:01:33
-------------------------------------
I put a complete log:
------------------------------------
#BlackBerry Event Log (cpt)

#HwID : 0xe001507

#DPIN : 0x2bfc8ad4

#PVer : 9.6.0.158

#AVer : 7.1.0.1033

S System - JVM:INFOp=2bfc8ad4,a='7.1.0.1033',o='9.6.0.158',h= e001507 - 7/7 02:37:42
¿ UI - GS-D 9a2cc12 - 7/7 02:37:40
¿ System - AMSF net_rim_event_log_viewer_app(335) - 7/7 02:37:39
¿ UI - GS+Q2 9a2cc12net.rim.device.apps.internal.ribbon.ui.Appl icationSwitcher - 7/7 02:37:36
S LogicMail - org.logicprobe.LogicMail.util.WrappedIOException: It is not possible to open the connection - 7/7 02:37:31
S LogicMail - It is not possible to open the connection - 7/7 02:37:31
W net.rim.networkapi - FatF net.rim.device.cldc.io.ssl.TLSIOException(net.rim. device.api.crypto.tls.TLSAlertException) - 7/7 02:37:31
W net.rim.networkapi - Fatf 6 - 7/7 02:37:31
¿ SSLAlertProtocol - SSL: R270 - 7/7 02:37:31
¿ net.rim.tcp - disc 1 - 7/7 02:37:31
i net.rim.tcp - TXss - 7/7 02:37:30
i net.rim.tcp - TXsb 72 - 7/7 02:37:30
i net.rim.tcp - OPEN - 7/7 02:37:30
¿ net.rim.udp - clos 31/96 - 7/7 02:37:30
i net.rim.tunnel - Clos 4 7 - 7/7 02:37:30
W net.rim.tunnel - Clos pId=864288520,id=4,state=3,waf=4 - 7/7 02:37:30
W net.rim.dns - RetQ - 7/7 02:37:30
¿ net.rim.dns - DnsR 4 - 7/7 02:37:30
W net.rim.dns - RXst - 7/7 02:37:30
i net.rim.udp - RXst 96 - 7/7 02:37:30
i net.rim.udp - RXST 1 - 7/7 02:37:30
i net.rim.udp - TXss - 7/7 02:37:30
i net.rim.udp - TXsb 31 - 7/7 02:37:30
W net.rim.dns - TXst - 7/7 02:37:30
¿ net.rim.dns - DnsQ 4 - 7/7 02:37:30
i net.rim.udp - OPEN - 7/7 02:37:30
i net.rim.tunnel - Requ proc=LogicMail(334) entry=pId=864288520,id=4,state=3,waf=4 - 7/7 02:37:30
W net.rim.tunnel - Open pId=864288520,id=4,state=3,waf=4 - 7/7 02:37:30
¿ net.rim.udp - open udpsocket://;tunnelId=4 - 7/7 02:37:30
i net.rim.tunnel - Requ proc=LogicMail(334) entry=pId=864288520,id=4,state=3,waf=4 - 7/7 02:37:30
W net.rim.tunnel - Open pId=864288520,id=4,state=3,waf=4 - 7/7 02:37:30
¿ net.rim.tcp - open tcpsocket://pop.gmail.com:995;interface=wifi - 7/7 02:37:30
i net.rim.networkapi - FcoC ssl://pop.gmail.com:995;interface=wifi - 7/7 02:37:30
W net.rim.networkapi - Fatt 6 - 7/7 02:37:30
¿ UI - GS-D e402f4c6 - 7/7 02:37:28
¿ System - AMSF LogicMail(334) - 7/7 02:37:28
¿ UI - GS+Q2 e402f4c6net.rim.device.apps.internal.ribbon.ui.App licationSwitcher - 7/7 02:37:27


--------------------------------------------------
References for IMAP negociation protocol on Gmail:
https://developers.google.com/gmail/...auth2-protocol
https://developers.google.com/gmail/imap/imap-smtp
https://developers.google.com/gmail/...map-extensions

[farnoces]

https://stylufka.pl/elementarz-korea...krok-po-kroku/After this update, some emails did not come