[jvb_backman]

Hi,

Don't know if I should post this here or under BES Admin Corner but we'll see how this works out.

I switched from a 9790 to a 9900. If I browse the internet I now frequently get the message 'The server has a different hostname than is supplied in the certificate. Would you like to continue with the connection or close the connection?'. Any idea why I'm getting this on the 9900 and not on the 9790? Anything new in OS 7 that might cause this?

Notice that we only allow browsing through the BES and that the BES passes a proxy (Bluecoat) before going onto the internet (SSL interception is disalbed). But then again, the backend hasn't changed. Just the device.

[MatthewCastillo]

Did you ever find a resolution? I have a user with the same problem.

[freakinvibe]

This happens when you browse HTTPS (SSL) sites and Blackberry finds that the certificate doesn't match the host name. This can for example happen if the certificate was registered for

www.blackberry.com

but you type in the browser

https://blackberry.com

So the missing www is the problem.

But if you choose "Continue", the host name will be saved in the "Trusted Hosts" list on the BB device and you should not be asked again in future visits. You can check your list of Trusted Hosts by going to options and then type TLS. Go into the TLS settings and look at the very end of the page for "Trusted Servers".

If you are a BES Admin, you can also change the TLS policies to avoid those prompts:

TLS Disable Invalid Connection IT policy rule
TLS Disable Untrusted Connection IT policy rule
TLS Prevent Unmatched Domain Name

Sorry for the late reply, but I just saw this post now.