Re: Digital Signature for MIDlet?

Hi,

Thanx for all the feedbacks.

I'd checked the keystore using keytool -list command.... however since
i'm not using the default naming therefore i need to put in the -keytool
parameter.

The Verisign customer support says that i should be able to see the SHA
listing in the keytool -list command.... however i'm only able to see
the MD5 fingerprint.

Is it because of this that the verification failed? Then how should i
regenerate the keys for the keystore?

Thanx
FooShyn

> Are you sure you imported the whole chain into your store?
>
> Run keytool -list and verify that the signing certificate is a chain
> of length 2.
>
> If not, you'll need to import your certificate again, or perform
> surgery on your keystore.  I've found IBM's KeyMan to be an invaluable
> surgical tool:
>
> http://www.alphaworks.ibm.com/tech/keyman
>
> How are you signing your MIDlet?
>
> The GUIs generally get this right, at least these days.
>
> If you're signing manually using JadTool, then *NOTE* that it
> mishandled certificate chains until very recently (I filed the bug
> report).  It's fixed in WTK2.5.1 though.
>
> If you're using JadTool you can add certificates explicitly:
>
> java -jar JadTool.jar -addcert alias mykey -keystore keystore
> -chainnum 1 -certnum 1 -inputjad in.jad -outputjad out.jad
>
> java -jar JadTool.jar -addcert alias mykey -keystore keystore
> -chainnum 1 -certnum 2 -inputjad in.jad -outputjad out.jad
>
> Or, to automatically include all certificates chained to the alias:
>
> java -jar JadTool.jar -addcert alias mykey -keystore keystore
> -inputjad in.jad -outputjad out.jad
>
> With either method, the expected result in out.jad is:
>
> MIDlet-Certificate-1-1: <encoded signing certificate>
> MIDlet-Certificate-1-2: <encoded intermediate authority>
>
> However, this used to be broken.  In particular, if you tried to add
> the chain links explicitly (using -chainnum and -certnum params),
> you'd get the first chain link duplicated twice:
>
> MIDlet-Certificate-1-1: <encoded signing certificate>
> MIDlet-Certificate-1-2: <encoded signing certificate again>
>
> Or, if you tried -addcert without -chainnum and -certnum, you'd only
> see the signing certificate:
>
> MIDlet-Certificate-1-1: <encoded signing certificate>
>
> --Joe
>
> ===========================================================================
> To unsubscribe, send email to [email protected] and include in the body
> of the message "signoff KVM-INTEREST".  For general help, send email to
> [email protected] and include in the body of the message "help".
>
>
>
>

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".