Midlet signing - is it worth it ?
Hi,
What I don't understand is, how signing prevents a hacker, to copy the Java program, re engineer it with some other code, and then publish it with the same name - with no signature. What does the user need to do in order to verify that the version he has - is signed ?
Also, is there a list somewhere of which Cellular models work with which public key provider.
And finally, which company is the best to but a Public Key for Nokia cellulars.
Thanks
If at all possible, keep the pc alive. You will need a place to backup your stuff that will not go to the cloud. If your pc supports the current version of I tunes, then load it up and make that your central storage place. If your problem is simply lack of disk space on the pc, external USB drives are pretty cheap.
In any event, you will need I tunes to get the non purchased music o to your pad, so you will need a pc at some point.
Similar Messages
-
Hello,
Questions
- Is trusted third party signing enough to reach a significant amount of JSR-75 compatible mobiles, with a good user experience ?
-What is the best third party for signing midlets ?
- Is Manufacturer & Operator Sining feasible for a small company ?
Background
we're involved in a project that aims at accessing various data on the memory car/Internal memory/Sim+ memory of mobile phones.
we know JSR-75 "File connection" is a must to do that, and we wish to use it on every capable phone.
Different-devices = different-behaviour
However, we are facing a platform/menufacturer specific issue :
With an unsigned midlet :
-Nokia device (6680, 6120, n95...) give access to the data, but keeps asking the permission to the user each time he wants to read a single file
-Sagem (my700x) device allows us to configure the program so that we're asked only once the permission.
- Motorola (RAZR V3i) freezes....
Midlet signing solutions
I know that midlet signing can help. However, we don't know which signing process suites our need :
- Java Code Signing (self-certification using keytool)
- Java Code Signing - Trusted third party (buying the certificate from Verysign or Thawthe as in google mail)
- Manufacturer & Operator.
Edited by: Nicolas_Dmailer on Dec 19, 2007 8:16 AM
Edited by: Nicolas_Dmailer on Dec 19, 2007 11:53 PMSigning issue related with permission of midlet like to send the SMS to open the http connection that api required certification of third party & u can sign the midlet using tool givan by java itself
here is link u can see the how to sign the midlet first then follow the certification procedure
http://developers.sun.com/techtopics/mobility/wtk/demos/wtk-sign.html
its link how can sign with wireless tollkit
to certification u can follow but u have to check u rdevice which certification support then choose
1) Verisign certification : u can visit www.verisign.com here u got the link for digital key under u got link for for sun java certification
2)Also u can follow thawte certification : u can visit also thwate.com
3)Or u can visit for java certification www.javacertification.com
Regards
AB
for RMS persistence issue no need of signing u have to check code -
Hello
I have developed an application that check some data in a DB and in some
cases it sends to a specific GSM an SMS as an alert. The problem was when
I wanted to deploy this application on my target phone (Nokia 6230) cause if
you want to send a SMS you always have to confirm this action. The phone
always asks you if it can send this SMS. The problem is that this action
should be automatically triggered and I can not always confirm to send SMS.
I have read that the solution is to sign you midlet with a valid certificate and
then the phone will not ask for confirmation any more.
Can someone give me an advice where I can acquire such certificate and how
this signing can be done. Any information will be useful.
Thank to all
MitjaVerisign ot Thawte are you best bet. Not that cheap though, and they may not be available on all carriers & phones.
Google for MIDlet signing for some excellent tutorials. -
I am having trouble with signing and perhaps you can help.
We signed our SMS MIDP 2.0 application with a key generated with the J2ME wireless toolkit. We tried to install it on a Samsung SGH-E715 running on T-Mobile network and get "Installation error: info invalid". I have been told that these certificates only work with the toolkit and we need a valid certificate for phones. Is that correct?
It appears that this phone does requires signing though, as we tried installing it without signing and got "Installation error: authentication failure." I assume that has to do with the following in the .jad file:
MIDlet-Permissions: javax.wireless.messaging.sms.receive,javax.wireless.messaging.sms.send,javax.microedition.io.Connector.sms,javax.microedition.io.PushRegistry
After installing without MIDlet-Permissions and then trying to send an SMS message, we of course get a security exception complaining about accessing a restricted API.
Is there any way to sign the midlet with a trusted "development" certificate? I am on a very tight budget.
Thanks in advance.
JimYou must know that what we call third party certificates (thawt, verisign) are not supported by all the market's devices.
To run, a signed application( ex thawte), must be installed on a device which contains that root certificate (thawte) !
There are some operator cetificates too ( vodafone, T mobile) and the Java verified one (UTI) which is supported on a large part of market's devices.
Finally, manufacturer certificates, (Motorola) are delivered for free, but can only be used on one phone ( you've to send the phone's UID to Motorola).
I became crazy by all this issues, I lost most of my time in trying to sign my applications to test them !
(I have a dream) I think that it will be a good idea to make a testing certificate (by java, why not) which will be supported on all devices !
thanks, Idir.
Edited by: skizo on 21-Aug-2008 11:18
Edited by: skizo on 21-Aug-2008 11:19 -
How Midlet Signing prevents code modification.
Hello
I've previously read somethings about signing but never experienced it.
I have a question now.
Every where it is said that signing a midlet prevents others from modifying my code and distribute it under my name.
Is this easy for any user to check the certificate owner on his handset??
And could you please tell me how it can be done??Yeah, I'm pretty sure of that thanks to watching the diagnostics window. Everything falls apart at that point. Yes, Class 3 root certs are installed on the devices.
We're regenerating our cert, so we'll see what happens then and hopefully our problem is solved.
Thanks for the reply! -
NetBeans Midlet signing not working for Sony Ericsson M600i
Hi,
I'm developing an midlet that uses FileConnection class extensively. I intend to deploy the midlet on Sony Ericsson M600i. I want to make my Midlet a trusted one so that the annoying warning popups stop each time access the device filesystem.
I created a keystore in netbeans and created a certificate using keytool using that keystore. Then I installed the certificate on the device. When I tried to depoly the midlet it says 'security check failed. cant install'.
the device has MIDP 2.0 and CLDC 1.1
pls explain how to make my Midlet trusted.
thank you in advancepls explain how to make my Midlet trusted.You have to purchase a certificate (Verisign, Thawte...). NetBeans and WTK self-generated certificates are only for testing on the emulator and are not recognized by any handset (the root certificate is not available in the certificate store). And then, whether your purchased certificate is recognized by a specific device is both manufacturer/model and carrier dependent.
For self-signing MIDlets for Nokia Series 60 handsets, see SD's topic [n]Free Self Signing Midlet for Series 60 3'rd Edition at
{color:#0000ff}http://forum.java.sun.com/thread.jspa?threadID=5212743{color}
Haven't come across anything similar for SE phones though.
cheers, Darryl -
MIDlet Signing a tutorial (or sorts)
Hi,
I've spent some time recently documenting how I managed to get a signed MIDlet installed on my phone. It's all here
http://www.spindriftpages.net/pebble/dave/2005/06/20/1119275880301.html
Hope somebody here finds this useful
David HayesHI,
I appreciate it much. Hope it will be help me, but I havn't tried, yet.
Does signing my MIDlet helps to suppres the announcement "Untrusted Midlet" some mobile phones show before instalation?
Thx. -
hi experts,
l'm developing a midlet that uses PushRegistry, i knew the midlet need to be signed in order to get rid of the permission prompt. Any others way to get rid of the prompt when run in the actual device for developement and testing purpose?
many thanks.ffjia wrote:
ngoonee wrote:
For reference, you can't post to [arch-dev-public] (I've tried it before), its read-only for non-devs.
There's also been a bit of noise on [arch-dev-public] (about 2-3 months ago?) about getting a new category 'testers' to supplement the current devs and TUs. Basically a group of people who are trusted to say 'yes this package in [testing] works' but not to actually upload packages etc.
It's read-only for non-devs? I remember seeing "User signoffs are fine" some day, does that mean non-devs can signoff?
For those, send the signoff to [arch-general]. -
MIDlet signing [openssl approach to generate CSR]
Guys,
Here are the questions that needs verification..
1. Aside from Wireless Toolkit - JadTool.jar, What is another way to sign the MIDlet?
a. the approach used to generate CSR was openssl.
2. Is it possible to sign the MIDlet, if the CSR generated is from openssl approach? [Files generated r: .key and .csr] We know that on keytool approach [Files generated r: .keystore, .alias and .csr]
3. Does Openssl technology is used only for web signing?
4. Does certificate for web is different from mobile?
5. Is it possible for one CRT file from Verisign, it can be use to certify WEB and mobile?
Thanks in advance..
Edited by: eesbee on Jul 30, 2009 3:03 AMGuys,
Here are the questions that needs verification..
1. Aside from Wireless Toolkit - JadTool.jar, What is another way to sign the MIDlet?
a. the approach used to generate CSR was openssl.
2. Is it possible to sign the MIDlet, if the CSR generated is from openssl approach? [Files generated r: .key and .csr] We know that on keytool approach [Files generated r: .keystore, .alias and .csr]
3. Does Openssl technology is used only for web signing?
4. Does certificate for web is different from mobile?
5. Is it possible for one CRT file from Verisign, it can be use to certify WEB and mobile?
Thanks in advance..
Edited by: eesbee on Jul 30, 2009 3:03 AM -
Midlet Signing : Questions
I've gone through the process of signing a Midlet in an attempt to make it trusted and now have a JAD file that contains the certificate entry and signature entry. However when loading the Midlet on devices it fails the installation, stating security or authorization failure.
In brief here are the steps taken.
1. Use J2SE keytool to generate a key pair.
2. Use J2SE keytool to create a CSR
3. Send CSR to VeriSign for Certificate generation
4. Use J2SE keytool to import certificate purchased from VeriSign
5. Import the J2SE keystore (the based on Alias used in J2SE) into the WTK.
6. Use WTK JADTool to add certificate to JAD file
7. Use WTK JADTool to generate a signature and add it to the JAD file.
Questions
A. What type of certificate must be requested from VeriSign? They have code signing certifcates, server certificates etc.
B. What key algorithm must be used during step 1 above for generating a key pair?
C. Is it necessary to import the J2SE keystore into the WTK if using the JADTool command line to do the signing?
D. After step 5 above attempting to sign the Midlet from within the WTK gui resulted in nothing being added to the JAD file but also no error message of any kind. Any idea why this would happen?
E. When using the JADTool in steps 6 and 7 above I referenced the J2SE keystore with the command line options. Is this correct or must it reference the WTK keystore?
JDK 1.4.2.03 and WTK 2.1 used.
Thank You
Ken CarlinoHi there,
I am having the same problem, If you have fixed your problem can you please post the solution on this forum ? I need to sign my midlet, i do not know what type of certificate shall i buy from verisign to sign my midlet. Does verisign cover most phone as CA built on to the devices??? -
I signed a midlet and tried to load it to my Cingular Motorola V557 phone.
All I want is to use Bluetooth. So I bought a Verisign Java Code signing certificate and did everything the tutorials told me to do in regards to the keystore file. I am using EclipseME and set it to sign my midlet using that keystore, it correctly asks me for my passwords so I know it tried to do its work.
When I upload it to the phone I get the following error:
Authorization failed, application not installed.
I am a noob to signing java code so I am hoping this is something fundamental:
Here is a copy of my jad file:
MIDlet-Jar-Size: 40360
MIDlet-1: tbt,,midlets.BluetoothTest
MIDlet-Jar-URL: tbt.jar
MIDlet-Jar-RSA-SHA1: a8I0l6zLBH6JoL0VGnHjaJ5rZ8YptQf1q7tW1BzXe+Xr4EWVp4mrhtfhAy1dooXFYj2aihZg5IaCcG4mWb6fTnpWkwUo1mUt8J88HUu8kaPrRywfJJ1DX+BM2zeHnffck4Psg4S+Iv6LqhaSzr7vzFvMF2uxvRrz7qkSdVFXOiw=
MicroEdition-Configuration: CLDC-1.1
MIDlet-Version: 1.0.10
MIDlet-Certificate-1-2: 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
MIDlet-Certificate-1-1: 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
MIDlet-Name: tbt Midlet Suite
MIDlet-Vendor: Midlet Suite Vendor
MicroEdition-Profile: MIDP-2.0
MIDlet-Permissions: javax.bluetooth.DiscoveryAgent
Is there a tool or something I can grind this through to determine what the problem might be?
Thanx
BodgerIt apparently has something to do with the midlet permission string.
The one I had was definitely wrong.
So, I now have:
javax.microedition.io.Connector.bluetooth.client
Now I get this error when I try to load the midlet, this is from my phones debug log:
SM_GetNumRootCerts: Total number of KJAVA certs on SIM and NVM (Type-3): 0, 0
SJ_IsCoreletDI: Synerj signature not found into the JAD file
SM_GetRootCertificate: DN = C="US";O="VeriSign, Inc.";OU="Class 3 Public Primary Certification Authority", Type = 15
SM_GetRootCertificate: Subject key ID extension is not present.
sm_LoadDomainRegistryIDs: number of domains = 6
sm_LoadDomainRegistryIDs: number of permissions = 28
sm_LoadDomainRegistryIDs: domain "0" name length = 3f
sm_LoadDomainRegistryIDs: Read domain: 'CN="Cingular Preferred Root CA",O="Cingular Wireless, LLC",C=US' with 8 permission groups
sm_LoadDomainRegistryIDs: domain "1" name length = 3d
sm_LoadDomainRegistryIDs: Read domain: 'CN="Cingular Trusted Root CA",O="Cingular Wireless, LLC",C=US' with 10 permission groups
sm_LoadDomainRegistryIDs: domain "2" name length = 42
sm_LoadDomainRegistryIDs: Read domain: 'CN="GeoTrust CA for UTI",O="Unified Testing Initiative (UTI)",C=US' with 3 permission groups
sm_LoadDomainRegistryIDs: domain "3" name length = 55
sm_LoadDomainRegistryIDs: Read domain: 'O="Motorola Inc",C=US,ST=Illinois,L=Libertyville,OU=PCS,CN="Manufacturer Domain 40-1"' with 10 permission groups
sm_LoadDomainRegistryIDs: domain "4" name length = 4b
sm_LoadDomainRegistryIDs: Read domain: 'OU="Class 3 Public Primary Certification Authority",O="VeriSign, Inc.",C=US' with 3 permission groups
sm_LoadDomainRegistryIDs: domain "5" name length = 10
sm_LoadDomainRegistryIDs: Read domain: 'Untrusted_Domain' with 2 permission groups
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission group UID "0x100b" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission group UID "0x100b" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
sm_LoadDomainRegistryIDs: WARNING! Permission UID "0x301e" not found on the device
SM_MapDomainToRootCert: certType = 4, certName = 'C="US";O="VeriSign, Inc.";OU="Class 3 Public Primary Certification Authority"'
SM_MapDomainToRootCert: Found domain: 'OU="Class 3 Public Primary Certification Authority",O="VeriSign, Inc.",C=US'!
SM_getDomainPermissions: Domain name: OU="Class 3 Public Primary Certification Authority",O="VeriSign, Inc.",C=US
SM_getDomainPermissionGroup: Domain name: OU="Class 3 Public Primary Certification Authority",O="VeriSign, Inc.",C=US, Requested group: 6
sm_SetDomainPermissions: Critical permission 'javax.microedition.io.Connector.bluetooth.client' is not found in domain!
SECMGR_verifyJADSecurity: Returned error code: 23
SECURITY_MANAGER FINAL CODE: 23. DATE: 01-09-2006 16:40:17 (81)
AMS ERROR: AMS_JADR_PROCESSING, 103, 23
AMS: AMS_STATE_CHANGED_TR, 21
AMS: AMS_INST_EXIT
AMS: "ams_Inst_Start_Posting, code ", 10
AMS: AMS_INSTL_FINALIZATION
AMS: AMS_HEAP_RELEASED_TR
AMS: "ams_Inst_Finalize() end."
AMS: AMS_STATE_CHANGED_TR, 0
JsaInst : JsaInst_Exit.
[AMSDLG] : AmsDlgGainFocus route id=41.
[AMSDLG]: process event_list code=20 route id=41..
JTOOLS : Event 0x14 has come
AMS: "ams_Inst_Exit() end."
This has to be the problem can you give me some idea how to proceed?
'javax.microedition.io.Connector.bluetooth.client' is not found in domain!
Thanx
Bodger -
MIDlet signing -trusted third party
Hi all,
I have signed my MIDlet and it shows as trusted third party, in my Nkia 6630 device.
I was expecting it would prevent me from asking everytime when push message arrives to start application but it did not. And in suite settings there is not "always allowed" choice. Do you have any idea regarding this problem, because if it is going to ask everytime then certificate does not make any sense at all.
CheersIt turns out that after the code signing certificate was downloaded, the private key was somehow lost or damaged or not associated with it in the first place. That is why I was not seeing the option to export the key. We needed to use certutil to repair
the key association.
I suspect this is because the request was made from a web form and handled by the 3rd party CA as opposed to being done with certreq. Am I off base?
Anyway, running this command on the code signed certificate allowed me to export it as needed for SCUP:
certutil -repairstore my "SerialNumberofCert"
There are some how tos here:
http://support.microsoft.com/kb/889651
http://blogs.msmvps.com/ivansanders/2011/07/26/restoring-a-certificates-private-key-without-the-certreq/ -
MIDlet signing does not with original certificate
Hi guys,
I have purchased a code siging certificate from thawte. I have root certificate for thawte in my device. When I try to install application through URL using .jad file it says
"Unable to verify digital signature"
I am in shock, I payed a lot of money for that certificate. Does any of you have any idea regarding this issue?
Thanks in advancehi
how did you make the cedrtification file (.cer)? -
Trusted Midlet and midelt Signing
Hi,
Am fairly new to this concept.. i have just finished developing an network based application and when I try to run it on a Sony Ericsson phone I keep getting a securityexception..
this can be avoided by making my midlte a trusted one.. for that I probably need to obtain a certificate from verisign or thwate... however i am not sure about the exact procedure..
i will probably get the certificate but then how do I use that to sign my midlet.. and what abt the key - value pair, or will that come with the certificate.. do i need to include this certificate as a part of my jar?
am sorry if i sound daft.. the thing is am clueless and i need some serious guidance from some of the gurus out there..
appreciate your help and patience..
thanks.Hi there,
I finally managed to secure a Java Object Signing certificate from Verisign, however beyond that I have not been able to make any progress...
I followed the steps exactly as outlined in the Eclipse ME guide for midlet signing.. let me just recollect the exact steps..
1. Generate the keys. By using the keytool -keygen option
2. Generate the cert reg and send to verisign
3. After verisign sends the certificate, import it back into the key store..
4. Use the key store now to sign the jar and jad (2 steps here, one for computing checksum, 2nd for signing the jad)
After all this.. when i try and install this midlet on my nokia phone.. it refuses to install.. goes on to the last stage and says security error unable to install..
Tried installing it on a sony ericsson.. it refuses to recognize the jad file itself.. just throws an error saying download failed..
am so lost as to what could be going wrong..
maybe its worth a mention - when I tried importing the certificate into my keystore it threw this warning..
Certificate fingerprints:
MD5: << some numbers >>
SHA1: << some numbers >>
... is not trusted. Install reply anyway? [no]: yes
Certificate reply was installed in keystore
What could be going wrong.. the certificate? or am i missing a step? please help.. -
Renew sample trusted key to sign midlet
Hi,
is there anyone know how to renew the testing key for midlet signing?
iv installed Sun Java Wireless Toolkit 2.5.2_01 version but the key only valid from 2/28/07 4:49 PM to 8/20/12
Edited by: tslee on Jan 16, 2013 7:21 PM1. What is the benifit to get MIDlet signed.
No warning after you sign the MIDlet!
2. how to do it? Can I do it with keytool? or J2ME toolkit?
You should buy a VeriSign or Thawte Java code signing to sign it. please refer the guide in this website: http://www.wotrust.com/support/Nokia_MIDlet_signing_guide.htm
3. I tried to sign my midlet suite with a self signed cert and using keytool, jarsigner and JadTool in WTK22. I export the cert to a .crt file and installed it on my 6630 and give all permission to it. My midlet is installed successfully as a trusted third party. But it still ask for internet access permissio everytime, which is what I want to get rid of.
Will a real Certificate from a CA get rid of the warning dialogs?
Self-signed cert don't support in any mobile phone! you should buy a real cert from CA to get rid of the warning dialos.!
Maybe you are looking for
-
Apple TV cuts off when open Macbook. WHY IS THIS STILL AN ISSUE!!
The issue is not fixed with Apple and it's really annoying. It affects all devices. Here is what I have found so far and I'm pulling my hair out. APPLE!! why have you not had a fix for this yet? You come out with the latest and greatest devices but y
-
Bootcamp iMac problem with windows 7
Hello people, when i try to install apple drivers on my already installed windows7 through the disk i get errors: Self extract blablabla error, the blablabla is the thing that is frozen in the installation with bootcamp apple drivers. Evry time i ins
-
After correcting the color cast in a photo in one of my albums using Elements 3, I cannot seem to get the corrected picture back into the album. I suspect that I'm not saving it correctly. Here's what I'm doing in the event someone can help me. I've
-
Valuation control in material master and special stock differs
Hello expert. SAP is showing the attach error when a key user is trying to making a usage decision What can be the problem? And how can i resolve? Check the attach file. thank
-
Fuel Consumption Report Modification - 21
Hi Experts I am working on fuel consumption modification. can anyone help me how to get max and min value for this program I am getting one row correct with equipment no is enter but when I enter the range of equipment no it is taking long time and t