TouchDown

Apologies - I presume this is a known issue but I haven't been able to find a difinitive answer.

Touchdown for Smartphones was running fine on my Android 6.x Nexus 6P until I upgraded to 7.0 Nougat.  Now it returns:

 

Checking Certificate...Checking ActiveSync with SSL...

Connection closed by peer:Exception performing request

ActiveSync version check returned negative, but still trying for 12.1

 

Checking 2007 with SSL...

Connection closed by peer for operation: Subscribe-> Error renewing a subscription

Connection closed by peer:Exception performing request

Checking Certificate...Checking ActiveSync with SSL...

Connection closed by peer:Exception performing request

ActiveSync version check returned negative, but still trying for 12.1

 

Checking 2007 with SSL...

Connection closed by peer for operation: Subscribe-> Error renewing a subscription

Connection closed by peer:Exception performing request

 

I'm not sure what version of Touchdown it was at the time, as it's updated since then, but I'm on 9.0.00412 now, with the same result.  Android 7.1.1 on Nexus 6P.  The Exchange Server I want it to talk to is Exchange Enterprise 2003 SP2 (build 7638.2)

Curiously enough, the native gmail app works just fine, so I'm not sure how Nougat has broken Touchdown.

Thanks,
Adam

 

Hi,

Could be a few things- can you write into touchdown-support@symantec.com and we'll continue there?

 

Thanks Peter - done.

 

Thanks!

Peter  et al ,

 

I too  have emailed as you  recomended for Adam  , identical issue .

Sony experia z5  , 6 months old  offered and accepted  an OS upgrade to Android 7 /nougat and  thats the  last time  i  got  my  email on the  device.

I couldnt   go backwards as will sony void my   warranty if i unlock the boot loader to be able to  use fashtool to  re instate marshmallow.

I cant  go  forwards and remain  with  touchdown as it  doesnt work with nougat .

 

Forced to  use other  mail client temporarlly.

Adrian

I'm having the exact same issue on Touchdown HD 9.0.00437.  After upgrade touchdown stopped working.

I then wiped my phone and reinstalled touchdown HD and imported my backup with no luck same issue.  Then I wiped the touchdown installation only and reinstalled and tried just setting up manually and still same issue.

Basically I can't do anything to use my fully licensed version of touchdown except to use the basic installed email app with the default account setup for EAS which is working just fine as the others have explained.

I will send an email to the listed address but I believe this needs to be active in the forums for others.  Since Samsung just released Nougat to all their devices I'm sure many are having this issue.

Hi,

This issue is not so much with Touchdown as it is with newer versions of Android not supporting certain insecure (POODLE attack vulnerable is one) ciphers for SSL connections, meaning Touchdown will refuse the connection. To check to see if your server is vulnerable, use this attack and let your IT team know they need to update their certificate.

https://www.ssllabs.com/ssltest/analyze.html

I am also seeing this issue with Android 7 (Nougut), Touchdown, Exchange 2007 ActiveSync, and a self-signed certificate.

The problem with the recommendation to update the certificate is that I can't tell what about the certificate Touchdown/Nougat does not like. When I use the SSLLABS SSLTest site, I get the messages:

• This server's certificate is not trusted,
• Certificate uses a weak signature. Upgrade to SHA2 to avoid browser warnings.
• This server supports SSL 2, which is obsolete and insecure, and can be used against TLS (DROWN attack). Grade set to F. 
• This server supports 512-bit export suites and might be vulnerable to the FREAK attack. Grade set to F.

From what I've read about certificate changes in Nougat, the problem might be due to self-signed certificate, but I prefer not to start changing things until I understand exactly what needs to be changed. I really don't want to pay for and manage a certificate from a Certificate Authority for a private e-mail server. Upgrading to a newer version of Exchange is on my list, but is not a quick fix.

I have found a couple of other Android e-mail applications that are happy to connect to the same configuration under Android 7, so it is technically possible to make this work.

I would be happy with a question that says "You are connecting to a site with an untrusted certificate. Are you really, really sure?"

Keith

Hi,

There is an option in Touchdown to do that (Touchdown account settings>trust any cert), but I think this is more based in the libraries Touchdown uses. I've heard other apps are willing to be a bit more permissive, but I suspect that if Touchdown were to do that, it would be compromising security.

We do use the "Touchdown account settings>trust any cert" option. The "trust any cert" option worked prior to Android V7 and fails with Android V7.

Security is great, but for us, Touchdown on Android V7 is sufficiently secure that it is unusable.

Keith

Same problem here BUT my touchdown has worked for weeks after the nougat update. Today it just decided to quit and now I can't even add the account as the check fails with the peer disconnected error. Things don't just stop working out of the blue. Something has changed and I have a hard time believing it's nougat when it worked for a while on nougat. Something needs to be fixed. Any further suggestions?

Hi,

Reach out via touchdown-support@symantec.com and we'll get logs.