Let's Encrypt certificates and BlackBerry

You may have heard about Let's Encrypt. If not, go there and check it. You can have SSL certificates for your servers for free, so there is now no excuse for not using https by default.

But Let's Encrypt certificates are not yet trusted in all browsers/systems. And one of those is my beloved BlackBerry OS 10. Here comes the good news: there is a way to fix it!

Go to https://letsencrypt.org/certificates/ and download https://letsencrypt.org/certs/isrgrootx1.pem and https://letsencrypt.org/certs/letsencryptauthorityx1.pem.
And then go to https://www.identrust.com/certificates/trustid/root-download-x3.html and copy certificate body to text editor. You need to prepend -----BEGIN CERTIFICATE----- and append -----END CERTIFICATE----- so it looks like this

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

and save it to file (such as dstrootx3.pem).

Then simply import these three files on your Blackberry phone via Settings - Security and privacy - Certificates - Import.

After doing so, your Blackberry should start trusting all Let's Encrypt certificates.

Comments

Thanks

Very helpfull and works perfect!

works, except for one site

Hi Martin,
Thanks for this tip. It works for most sites except for this one: osca.hs-osnabrueck.de

Do you have any suggestions,
Regards,
Louis Weismann

osca.hs-osnabrueck.de

Its possible that site is signed with one of the other intermediate certificates than the ones listed in this article. To ensure you cover ALL the bases you actually need to install seven certs from Let's Encrypt, and one from IdenTrust. As I mention in another post here you can install all eight required certs with just two click with my free multiCERT app. https://appworld.blackberry.com/webstore/content/59999147/

Cheers.

diky

Vse funguje naprosto super. Diky za navod !

Encription tthrough "Let's Encrypt"

A nightmare..... steps, coding reminds me of DOS, APL, COBOL, Fortran programing language.

I'll skip steps and hopefully find a "package", bundle from BlackBerry to update BlackBerry Classic.

Thanks

You made my day! Thanks.

cert problem

Thanks! You solved my long running problems

The Seven Certificates

Hi Martin, I've imported five certificates from Firefox to my Bold 9900, but I'm still getting certificate problems. Could you provide a list of the certificates you included in the BB10 app?

Add new comment

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
6 + 0 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.