Signing a Midlet

My midlet connects to a servlet through an Http connection. It works perfectly on the emulator, but when I run it on my mobile phone it throws an IO exception.
I was wondering if signing a midlet would solve my problem. If not, what is the benefits of signing a midlet.

The answer in one word : NO
The Emulator only represents an simulation of the actual device, it is not the actual device. So if ur codes run in the emulator don't take it for granted that it is all working and it is bound to run in the device too. There are several pros & cons that are need to be handled while running in the real device.
The benefits of signing a midlet does not certainly involve solving the pitfalls of your code (or your actions) and make it run. It has certain purposes to handle.
Hope this will help u to know this :
http://developer.motorola.com/techresources/testingcertification/testing_signing_programs/MIDlet_Testing_and_Signing.pdf/
Your problem here seems to be a security problem. Tell me if u are getting any dialog that asks for your permission to establish the connection or not. And after that another dialog asking which gateway to choose among the existing ones in your phone. If this two are coming then your code is working well at least till the connection establishment step. Is then your app fails to run? If so try to reach the url using the same gateway in the web browser in your phone. I'm quite sure that if your code is ok then it is the problem with the gateway.
Hope you will find out the problem.
Regds,
SD

Similar Messages

Sign a Midlet

Hi
I want to sign my MIDlet but I don't have my own server . So , I want to use the Java keystore but I don't have its password . Can you help me to sign it . Thanks

Hi,
Check this link, Hope it helps you.
http://java.sun.com/j2me/docs/wtk2.0/user_html/security.html#wp34514
Prabhu.

Sign a midlet, and build a prc file

Hi !
I have a java midlet that writes a file in the palm, using FileConnection.
Due to security system, the palm prompts if the user allows the midlet to write in the palm. But I don't want this prompt, and I think I must sign this program.
I have a pkcs12 keystore (.p12), then I would like to sign the midlet with this p12.
I tried to sign the jar thanks to Netbeans, but when I try to tranform jar+jad in prc, it doesn't work.
I tried to sign the prc using prcsign.exe, but I don't know how to sign a prc with a p12 file.
Can you help me, please ?
Thank you.
Laurent

I install portecle.
Then load into it a keystore with keypair that make csr..
load into keypair a ca response.
save keystore and use it to sign midlet.
I install into nokia n73.
Install successful but the http permission is asked anyway.
What's wrong?

Procedure to sign the Midlet

hi,
I am working on project which have capibilities get contacts(jsr75), dialing and mesaging. our purpose is to get certificate for trialing to sign the midlet to avoid the conformation messges. please tell me how i get the certificate which helps me to sign the midlet.
thanks for those who tell me.

I'm doing exactly the same thing for a demo. How did you have the midlet signed and installed on mobile device?

Problems signing a Midlet

I have gone purchased a certificate from Verisign and have imported it into my Keystore, used the NetBeans IDE to sign my midlet suite with it, but when I attempt to install the midlet suite with the OTA provisioning tool, I get this message: "... the public key used for authorization has expired."
Not suprisingly when we attempt to install it on an Ericson handset, the download fails, and on a WIndows mobile device, we get a message "...unable to verify digital signature."
Any idea what is wrong?
Thanks

hi,
I am also devloping an Application in which i was supposed to use ASP in the server side.I have created an selef sgned certificate.I don't know how to import the certificate to WTK23 and also to real device.
If you found solution let me know the way to do that.
Thanks in advance
lakshman

How to sign the MIDlet

Hello,
I am doing application for Motorola L7 SLVR.
I want to sign the midlet but I don't know the detail procedure of signing midlet.
If I want to go through Verisign certificate then is there any way to get trail basis certificate? and yes then how?
Thanks in advance.

All you need to know about the technique of signing is available at
http://www.spindriftpages.net/blog/dave/2006/06/18/midlet-jar-signing-a-tutorial-revised/
This will tell you how to create a trial certificate by yourself, sign and test it on your phone. If that is all you need the you are done.
However if you need to distribute your signed jar & jad to other phones, these other phones must have the trial certificate. In such a case you would usually sign it with a code signing certificate obtained from a certifying authority (like Verisign, Thawte etc.). This certificate would have to be imported onto that phone.

(Self-)signing a MIDlet for use on ~10 phones without spending money

Hello everyone,
I just spend like 4 hours researching how to sign MIDlet and I am totally confused.
Instead of asking for general instructions I am going to explain what I want to do. Hopefully that will enable people to tell me whether or not this is possible and what steps I should take.
What I want to do:
* I have a MIDlet (JAR+JAD pair), written for J2ME CLDC 1.1/MIDP 2.0
* This program needs to read and write files, as well as access GPS (using the Location API). I have specified the needed permissions in the JAD file (MIDlet-Permissions and MIDlet-Permissions-Opt)
* The end goal is to be able to run this program on a limited number (<=10) of phones. All phones are Nokia handsets running S60 3rd Ed. FP1/2. They are owned by my organisation so the IMEI numbers are known
* And now for the important thing: the program should not throw runtime warnings when files are accessed or the location API is used
* Because this is an entirely non-commercial thing the whole process should not cost me any money
So far I've been testing this application on a single Nokia N95-2 (8GB). Because the MIDlet is unsigned (or at least I believe that is why) it throws lots of runtime warnings (concerning file access and location access, eg: "Allow application X to read user data?" YES/NO). So this is exactly what I need to avoid when deploying this program on the ~10 other phones.
I understand that it is most likely impossible to achieve this with a single "signed" file that can be deployed on all 10 phones. However, supposing there is some free(!) "(self-)signing" procedure that produces a MIDlet that will work without the runtime warnings on a specific phone (identified by IMEI#), I am perfectly willing to go through this procedure for every phone/IMEI involved.
So is this possible? And if so, what are the steps I should take. Please give me as much info as possible. I've been googling for hours and I ave yet to find a decent explanation for a scenario like this.
Thanks in advance!

It is my understanding (from posts on other forums) that the procedure explained on that webpage ( [http://browndrf.blogspot.com|http://browndrf.blogspot.com] ) only works/worked on Nokia S60 2nd edition devices, due to a bug (or feature?) in Nokia's MIDP implementation. In the 3rd edition of the S60 platform this bug was fixed so the procedure no longer works.
As for my own project, we bit the bullet and got ourselves a Verisign certificate after all (for a whooping $500). So the problem is solved, although it wasn't exactly cheap.
Thanks for your helpful comments.
Regards,
M.S.

Signing a midlet advice

Hi whats the difference between a self signed one and one that you buy from somewhere?
which is the best certificate to buy and why do midlets need them?

self-signed will NOT result in your MIDlet suite becoming trusted in production, since your mobile device will not be able to verify this "personal" certificate with any of its trusted certificate authorities. it just creates the right format to allow the midlet suite to be signed.
you have to buy from someone like verisign or perhaps thwate. it costs around $500 the last time i checked.

MIDlet signing help

I am having trouble with signing and perhaps you can help.
We signed our SMS MIDP 2.0 application with a key generated with the J2ME wireless toolkit. We tried to install it on a Samsung SGH-E715 running on T-Mobile network and get "Installation error: info invalid". I have been told that these certificates only work with the toolkit and we need a valid certificate for phones. Is that correct?
It appears that this phone does requires signing though, as we tried installing it without signing and got "Installation error: authentication failure." I assume that has to do with the following in the .jad file:
MIDlet-Permissions: javax.wireless.messaging.sms.receive,javax.wireless.messaging.sms.send,javax.microedition.io.Connector.sms,javax.microedition.io.PushRegistry
After installing without MIDlet-Permissions and then trying to send an SMS message, we of course get a security exception complaining about accessing a restricted API.
Is there any way to sign the midlet with a trusted "development" certificate? I am on a very tight budget.
Thanks in advance.
Jim

You must know that what we call third party certificates (thawt, verisign) are not supported by all the market's devices.
To run, a signed application( ex thawte), must be installed on a device which contains that root certificate (thawte) !
There are some operator cetificates too ( vodafone, T mobile) and the Java verified one (UTI) which is supported on a large part of market's devices.
Finally, manufacturer certificates, (Motorola) are delivered for free, but can only be used on one phone ( you've to send the phone's UID to Motorola).
I became crazy by all this issues, I lost most of my time in trying to sign my applications to test them !
(I have a dream) I think that it will be a good idea to make a testing certificate (by java, why not) which will be supported on all devices !
thanks, Idir.
Edited by: skizo on 21-Aug-2008 11:18
Edited by: skizo on 21-Aug-2008 11:19

Midlet Signing

Hello,
Questions
- Is trusted third party signing enough to reach a significant amount of JSR-75 compatible mobiles, with a good user experience ?
-What is the best third party for signing midlets ?
- Is Manufacturer & Operator Sining feasible for a small company ?
Background
we're involved in a project that aims at accessing various data on the memory car/Internal memory/Sim+ memory of mobile phones.
we know JSR-75 "File connection" is a must to do that, and we wish to use it on every capable phone.
Different-devices = different-behaviour
However, we are facing a platform/menufacturer specific issue :
With an unsigned midlet :
-Nokia device (6680, 6120, n95...) give access to the data, but keeps asking the permission to the user each time he wants to read a single file
-Sagem (my700x) device allows us to configure the program so that we're asked only once the permission.
- Motorola (RAZR V3i) freezes....
Midlet signing solutions
I know that midlet signing can help. However, we don't know which signing process suites our need :
- Java Code Signing (self-certification using keytool)
- Java Code Signing - Trusted third party (buying the certificate from Verysign or Thawthe as in google mail)
- Manufacturer & Operator.
Edited by: Nicolas_Dmailer on Dec 19, 2007 8:16 AM
Edited by: Nicolas_Dmailer on Dec 19, 2007 11:53 PM

Signing issue related with permission of midlet like to send the SMS to open the http connection that api required certification of third party & u can sign the midlet using tool givan by java itself
here is link u can see the how to sign the midlet first then follow the certification procedure
http://developers.sun.com/techtopics/mobility/wtk/demos/wtk-sign.html
its link how can sign with wireless tollkit
to certification u can follow but u have to check u rdevice which certification support then choose
1) Verisign certification : u can visit www.verisign.com here u got the link for digital key under u got link for for sun java certification
2)Also u can follow thawte certification : u can visit also thwate.com
3)Or u can visit for java certification www.javacertification.com
Regards
AB
for RMS persistence issue no need of signing u have to check code

Is it possible to run a midlet as "trusted" without signing it ?

Hello everybody!
I have a frustrating problem. I have made a midlet that suppose to communciate with the Java SIM card using JCRMI. When I run the midlet on the phone I get the following error message "Application not authorized to access the restricted API". Ok, I know why I get this error. My application has to be trusted by the phone in order to get access to the JCRMI API. So, I need to sign the midlet. That would not be any problem either, but my problem is that my phone (Benq-Siemens EF81) does not seem to support installation of own Root-CA certificates. So in order to sign the certificate I would need to buy a certificate from some of the CA:s that are supported by the phone by default. But this is totally STUPID and EXPENSIVE.
So, my actual question is, is there a way to add a midlet to the trusted domain in the phone without signing the midlet? If I try to run a midlet that wants to use Internet, the phone asks if I want to grant access for the midlet if it is untrusted. But with JCRMI it is different. The phone does not give me any possibility to choose that I trust my own application and want to let it access the SIM card.
I would be very grateful if someone could help me with my problem

dear, this is possible in Nokia to save trial certificate in phone and we self signed our midlet for testing. but for Siemens i don't have knowledge whether this is possible or not.........

How Midlet Signing prevents code modification.

Hello
I've previously read somethings about signing but never experienced it.
I have a question now.
Every where it is said that signing a midlet prevents others from modifying my code and distribute it under my name.
Is this easy for any user to check the certificate owner on his handset??
And could you please tell me how it can be done??

Yeah, I'm pretty sure of that thanks to watching the diagnostics window. Everything falls apart at that point. Yes, Class 3 root certs are installed on the devices.
We're regenerating our cert, so we'll see what happens then and hopefully our problem is solved.
Thanks for the reply!

Can't sign Midlet in KToolbar

Hi,
I am using the File Connection API, so I all the time get this
annoing warning:
/Application name/ wants to read from the local file system. Is it OK to read your files?
In order to dismiss this warning (for testing in Emulator), I tried to sign the midlet. The package was created and signed in the KToolbar, but
the warning is still there.
What can I do to avoid this?
Thanks,
A.

Thanks, kichaa
You instructions helped me very mutch.
Does the application remains "trusted" after it's packed in
to the "jar"/"jad" files and executed in emulator from some other place (not from KTooolbar).
Thanks
A.
Hi,
To dismiss that warning in your emulator,you have
to make the application "Trusted".So in your WTK
select Edit>Preferences>Security>trusted.This is
only for the emulators.For real mobiles,you can get
your application signed by some authorities like
"Verisign".

Sign midlet and push registry

Hello people ,
Am wandering if i signed my midlet will the permission for push registry be "always yes", i mean no security messages will be shown to the user?
thanx in advance

Find your answer here :
http://discussion.forum.nokia.com/forum/showthread.php?p=184664#poststop
SD

MIDlet Signing a tutorial (or sorts)

Hi,
I've spent some time recently documenting how I managed to get a signed MIDlet installed on my phone. It's all here
http://www.spindriftpages.net/pebble/dave/2005/06/20/1119275880301.html
Hope somebody here finds this useful
David Hayes

HI,
I appreciate it much. Hope it will be help me, but I havn't tried, yet.
Does signing my MIDlet helps to suppres the announcement "Untrusted Midlet" some mobile phones show before instalation?
Thx.

Signing a Midlet

Similar Messages

Maybe you are looking for