Re: Digital Signature for MIDlet?

On 8/7/07, foo shyn wrote:
> Hi guys,
>
> For easy reference, here's the result i get from the -list command....
> the fingerprint is masked of coz....
>
> Keystore type: jks
> Keystore provider: SUN
>
> Your keystore contains 1 entry
>
> (alias name), Aug 6, 2007, keyEntry,
> Certificate fingerprint (MD5):
> xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
>
> Thanx
> FooShyn
>

The .cer file you received from VeriSign should contain two certificates,
the intermediate certificate and your signing certificate.

# keytool -printcert -v -file certfile.cer

Certificate[1]:
Owner: CN=MyCompany, OU=ABC, OU=Digital ID Class 3 - Java Object Signing,
O=MyCompany, L=MyCity, ST=MyState, C=US
Issuer: CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at
https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign,
Inc."
Serial number: 1a2a3a4a5a6a7a8a9a0a1b2b3b4b5b6b
Valid from: Wed Aug 11 19:00:00 CDT 2004 until: Fri Aug 12 18:59:59 CDT 2005
Certificate fingerprints:
MD5: A1:AA:A2:FF:7A:CA:9C:B4:70:42:B9:EE:FF:DD:5B:54
SHA1: 7F:23:32:3F:12:95:91:12:E3:C6:2E:82:46:5C:9D:F2:52:4B:E8:EF
Certificate[2]:
Owner: CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at
https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign,
Inc."
Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign,
Inc.", C=US
Serial number: 1C2C3C4C5C6C7C8C9C1D2D3D4D5D6D7D
Valid from: Sun Dec 02 18:00:00 CST 2001 until: Fri Dec 02 17:59:59 CST 2011
Certificate fingerprints:
MD5: C1:63:F5:54:97:48:5D:7B:AB:AA:5A:3F:32:B5:21:FE
SHA1: 49:D2:2F:DF:6B:8E:DB:7C:99:CD:48:7E:15:A3:C3:ED:13:8B:69:A8

After importing you should see a cert with two links in your keystore.

# keytool -list -v -keystore keystore.ks

Alias name: cert
Creation date: Feb 25, 2004
Entry type: keyEntry
Certificate chain length: 2
Certificate[1]:
Owner: CN=My Cert, OU=My Unit, OU=Digital ID Class 3 - Java Object Signing,
O=My Name,
L=My City, ST=My State, C=US
Issuer: CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at
https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign,
Inc."
Serial number: j3eff1234567890abcdef1234567890a
Valid from: Thu Feb 20 19:00:00 CST 2004 until: Sat Feb 20 18:59:59 CST 2005
Certificate fingerprints:
MD5: AA:BB:CC:DD:EE:FF:12:34:56:78:90:A1:A2:A3:A4:A5
SHA1: AA:BB:CC:DD:EE:FF:12:34:56:78:90:A1:A2:A3:A4:A5:BB:AB:CD:EF
Certificate[2]:
Owner: CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at
https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign,
Inc."
Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign,
Inc.", C=US
Serial number: 6deff1234567890abcdef123456789069
Valid from: Sun Dec 02 18:00:00 CST 2001 until: Fri Dec 02 17:59:59 CST 2011
Certificate fingerprints:
MD5: 12:34:35:45:AA:BB:CC:DD:EE:FF:FF:EE:DD:CC:BB:AA
SHA1: 49:BB:AB:CD:EF:CC:DD:EE:FF:12:34:56:78:90:A1:A2:A3:B6:69:9A

If that's not what you have, this tutorial by David Hayes might help:

http://www.spindriftpages.net/blog/dave/2006/06/18/midlet-jar-signing-a-tutorial-revised/

--
Joe Bowbeer

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff KVM-INTEREST".  For general help, send email to
[email protected] and include in the body of the message "help".