BlackBerry Forums Support Community

Closed Thread
LinkBack Thread Tools
Old 04-08-2010, 03:39 PM   #1 (permalink)
Knows Where the Search Button Is
elkabong's Avatar
Join Date: Dec 2005
Location: Austin, TX
Model: 8310
Carrier: AT&T
Posts: 31
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Another MDS HTTPS Proxy 'Connection Refused' Problem

Please Login to Remove!

First off, Google searches (and searches herein) yield definite hits for this, but no common or matched solutions to my problem. Also, many date back 5 years or so!

First off, my BES config is as follows:

Single BB Domain - 4 BES
  • 2x - BES 5.0 SP1 MR2 - Running on Win2K8 SP2 x64
  • 2x - BES 4.1.6 - Running on Win2K3 x86
  • Remote SQL DB on SQL 2005
  • Exchange 2003
  • ~1000 HH Users

Now the specifics of my problem:

We're having very odd issues with the BES 5.0 MDS Connection component (specifically with HTTPS web servers/sites). Using the HH Blackberry browser, HTTPS requests SOMETIMES work for some sites, NEVER works for others, and (weirdly) ALWAYS work for still others. This comes and goes and I have even gotten errors on simple HTTP (port 80) web browser requests. I've tested this over and over again (purging HH cache and replicating problem, etc) but can't find a single pattern. I error that I consistently get is the 'Error 400: Bad Request" followed in the details by the 'Connection Refused URLNAME.COM: 443'

I have an open ticket with T-Support, and one of the techs said that this is a 'known issue' (but didn't elaborate) with how the MDS handles certificates. I haven't heard back on details or resolution.

BES Logs have shown an 'Invalid Proxy Server' entry during these failed requests. We use ISA for our proxy server and have a rule configured to allow all of the BES IP's to anonymously access the internet. ISA monitoring hasn't been too helpful, as it just shows requests going back/forth between the BES and the ISA during these 'Bad Request' sessions. Accessing some of the 'problematic' sites from the BES itself via IE is not a problem.

Browser settings are set to use the Blackberry browser

5.0 MDS 'Proxy Configuration
  • Universal Resource Locator: .*://.*(:\d*)?(/.*)*(\?.*)?
  • Proxy Item: PROXY
  • Allow Untrusted HTTPS Connections: YES

This config was reviewed and validated by a RIM tech, as were the 4.1 BES proxy mappings.

This issue does NOT appear for ANY users on the 4.x BES, and there have NOT been any changes to our ISA/Proxy. I've sent logs to RIM for review but still no dice. We're needing to migrate SOON, however, but I just don't know where to look anymore. ANY help is appreciated on this.

El Kabong
If you're gonna shoot, shoot. Don't talk! - Tuco

Last edited by elkabong : 04-08-2010 at 03:40 PM.
Old 09-16-2010, 02:33 PM   #2 (permalink)
New Member
Join Date: May 2008
Model: 9800
Carrier: AT&T, tMobile, VZW
Posts: 2
Post Thanks: 0
Thanked 1 Time in 1 Post
Default Same problems here...

I have a very similar setup to your BES configuration except that we're running 4 BES servers all on 5.0.1 MR3 - soon to upgrade to SP2 MR1; and we have an ASA FW and an Ironport proxy appliances.

We're getting almost identical behavior with our devices and the same response from T-Support. I'm hoping the upgrade to SP2 will fix this...

Have you had any feedback from RIM or the Forum at all?
Old 09-17-2010, 09:06 AM   #3 (permalink)
BlackBerry Extraordinaire
noname's Avatar
Join Date: Sep 2005
Location: Congested Islet of "Foreign Talents" (> 45% of workforce) - Singapore.
Model: Z10
OS: 10.0.0
Carrier: Singtel
Posts: 1,504
Post Thanks: 6
Thanked 9 Times in 9 Posts

KB20833-Unable to browse to HTTPS websites from the BlackBerry smartphone that use a certificate containing "Subject Alternative Name"
Posted via Mobile
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Mac Tools PNEUMATIC OILER AL 12 Vintage pictureVTG.MAC 3/8" Drive 5/8" Universal Swivel Impact Socket 6 point # XUI-206
VTG.MAC 3/8VTG.MAC 3/8" Drive 11/16" Universal Swivel Impact Socket 6 point # XUI-226
VTG.MAC 3/8VTG. MAC 1/2" Drive 1/2" Universal Swivel Impact Socket 6 point # VUI-166
VTG. MAC 1/2

Copyright 2004-2016
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.