Re: Digital Signature for MIDlet?

foo shyn <[email protected]>
Newsgroups gmane.comp.java.sun.kvm
Message-ID <[email protected]>
Hi guys,

Well after registered with Verisign i managed to get the certificate and
installed in my keystore. However when i download the application to my
phone, it still prompt the untrusted message like it is previously.
Further checking reviewed that the serial key and fingerprint are
different from the key on the phone.

After consulting the Verisign support, they mentioned that i'll need to
import an intermediate certificate to my keystore in order to get it
working. But after googling through the web and even looking at their
step-by-step guide, i found that only SSL installation need the
intermediate certificate, and can't find any info about it on J2ME signing.

Is the intermediate certificate necessary in the code signing process?
Appreciate it if someone with similar experience can share some limelight.

Thanx
FooShyn


[email protected] wrote:
> Edoardo,
>
> Yes, the Motorola devices seem particularily spotty in their UTI support. As for other certificates such as Verisign it is not enough for a device to support it but you also need it to map to the protection domain you need, i.e. enabling the protected APIs you want to access.
>
> The trouble with certificates such as UTI (and all others) is that there is no common standard as to which protection domain a certificate maps to. So even if all device your target support UTI there is no guarantee your application will be able to do the things you need.
>
> As for Motorola, if a device doesn't support UTI nor Verisign then you need to work with that OEM to obtain signature with their proprietary certificate.
>
> -- Terrence
> [Message sent by forum member 'terrencebarr' (terrencebarr)]
>
> http://forums.java.net/jive/thread.jspa?messageID=229019
>
> ===========================================================================
> To unsubscribe, send email to [email protected] and include in the body
> of the message "signoff KVM-INTEREST".  For general help, send email to
> [email protected] and include in the body of the message "help".
>
>
>
>

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.