Re: Help with SSL (..got it!)

Hey Davide ::

Thanks for your reply.  Your comment about setting the
local kVM to accept my certificate was the right path.
Sun's wireless toolkit supports HTTPS(SSL) and I was
able to configure the emulator to recognize my local
Tomcat SSL as a valid certificate.  In short,

 I got kSOAP and SSL to work!!  :-)

Here's the current downside : 
All J2ME/CDC applications have access to HTTPS
functions, but HTTPS support is not officially
required in the MIDP 1.0 specification. Given the
obvious importance of HTTPS in mobile commerce, many
MIDP device vendors have added support for HTTPS to
their own MIDP runtime implementations anyway. Sun
Microsystems also added HTTPS support to its J2ME
Wireless Toolkit from version 1.0.2 forward.

This sounds like SSL support in MIDP 1.0 devices may
be specific to the device runtime (this will make it
hard to produce portable code for certificate
handling).  MIDP 2.0 has SSL as a requirement.. 

I'm working on putting a small package together to
share my findings with the community. This will
include what I did to add "Basic Authentication"
support to kSOAP headers and what I did to get
HTTPS/SSL to work and how I tested it (using Tomcat
and Sun's WTK). I'll post something here when I get to
it..

Hope this helps..

keep SOAP-ing!
Monk (Mike)

--- Davide Inglima <[email protected]>
wrote:
> > I've written a transport class (HttpsTransport)
> that I
> > use in place of kSOAP's HttpTransport.. To test, I
> > setup a simple SOAP service on my Tomcat server
> and
> > enabled SSL  (using java's keytool) .. now,
> remember
> > my SSL was generated locally and therefore not
> signed
> > by a real "certificate authority" (which probably
> > explains my error) :
> > javax.microedition.pki.CertificateException:
> > Certificate was issued by an unrecognized entity
> 
> I am not a java security expert, nor a J2ME expert,
> so don't look at 
> this as the definite answer... but for this (on
> Java2SE) I would give a 
> look at java "policytool"... maybe you can set the
> local KVM to accept 
> you as a certified entity... or maybe you have to
> load yourself as a 
> trusted certification authority...
> 
> Otherwise IIRC Thawte should have a "personal free
> email certification" 
> program for getting certificates without paying $$$.
> 
> > Any help would be greatly appriciated.. and of
> coarse
> > any advancement made (basic auth and/or SSL) will
> be
> > contributed back to kSOAP if desired..
> 
> Monk, you would be my personal saviour if you
> published that code.
> I really really hope this helps.
> 
> 
> _______________________________________________
> Ksoap mailing list
> [email protected]
> http://www.enhydra.org/mailman/listinfo.cgi/ksoap


__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools