Re: Digital Signature for MIDlet?
foo shyn <[email protected]>
| Newsgroups | gmane.comp.java.sun.kvm |
|---|---|
| Message-ID | <[email protected]> |
Hi guys, For easy reference, here's the result i get from the -list command.... the fingerprint is masked of coz.... Keystore type: jks Keystore provider: SUN Your keystore contains 1 entry (alias name), Aug 6, 2007, keyEntry, Certificate fingerprint (MD5): xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx Thanx FooShyn foo shyn wrote: > Hi, > > Thanx for all the feedbacks. > > I'd checked the keystore using keytool -list command.... however since > i'm not using the default naming therefore i need to put in the -keytool > parameter. > > The Verisign customer support says that i should be able to see the SHA > listing in the keytool -list command.... however i'm only able to see > the MD5 fingerprint. > > Is it because of this that the verification failed? Then how should i > regenerate the keys for the keystore? > > Thanx > FooShyn > >> Are you sure you imported the whole chain into your store? >> >> Run keytool -list and verify that the signing certificate is a chain >> of length 2. >> >> If not, you'll need to import your certificate again, or perform >> surgery on your keystore. I've found IBM's KeyMan to be an invaluable >> surgical tool: >> >> http://www.alphaworks.ibm.com/tech/keyman >> >> How are you signing your MIDlet? >> >> The GUIs generally get this right, at least these days. >> >> If you're signing manually using JadTool, then *NOTE* that it >> mishandled certificate chains until very recently (I filed the bug >> report). It's fixed in WTK2.5.1 though. >> >> If you're using JadTool you can add certificates explicitly: >> >> java -jar JadTool.jar -addcert alias mykey -keystore keystore >> -chainnum 1 -certnum 1 -inputjad in.jad -outputjad out.jad >> >> java -jar JadTool.jar -addcert alias mykey -keystore keystore >> -chainnum 1 -certnum 2 -inputjad in.jad -outputjad out.jad >> >> Or, to automatically include all certificates chained to the alias: >> >> java -jar JadTool.jar -addcert alias mykey -keystore keystore >> -inputjad in.jad -outputjad out.jad >> >> With either method, the expected result in out.jad is: >> >> MIDlet-Certificate-1-1: <encoded signing certificate> >> MIDlet-Certificate-1-2: <encoded intermediate authority> >> >> However, this used to be broken. In particular, if you tried to add >> the chain links explicitly (using -chainnum and -certnum params), >> you'd get the first chain link duplicated twice: >> >> MIDlet-Certificate-1-1: <encoded signing certificate> >> MIDlet-Certificate-1-2: <encoded signing certificate again> >> >> Or, if you tried -addcert without -chainnum and -certnum, you'd only >> see the signing certificate: >> >> MIDlet-Certificate-1-1: <encoded signing certificate> >> >> --Joe >> >> =========================================================================== >> >> To unsubscribe, send email to [email protected] and include in >> the body >> of the message "signoff KVM-INTEREST". For general help, send email to >> [email protected] and include in the body of the message "help". >> >> >> >> > > =========================================================================== > > To unsubscribe, send email to [email protected] and include in the > body > of the message "signoff KVM-INTEREST". For general help, send email to > [email protected] and include in the body of the message "help". > > > =========================================================================== To unsubscribe, send email to [email protected] and include in the body of the message "signoff KVM-INTEREST". For general help, send email to [email protected] and include in the body of the message "help".