×

Discussion Board

Results 1 to 5 of 5
  1. #1
    Registered User
    Join Date
    Mar 2008
    Posts
    3

    Midlet - "Unable to verify certificate"

    Hey All!

    I have recently purchased a Java Certificate from verisign but are having issues with signing MIDlet's on my n70.


    So far i have:

    Made a keystore.
    Made a certificate req.
    Imported returned Certificate.
    imported keystore into WTK.
    Signed JAD with WTK.(also tryed via jadTool(-addcert and -addjarsig) but got the same result)

    But when I try to install the JAD on my n70 right before the file is finished downloading I get this error message - "Unable to verify certificate".

    The Sony Z750i works fine.

    The only weird thing is that a versign signed MIDlet from THQ with the same MIDlet-Certificate-1-2(no MIDlet-Certificate-1-3 but I already tried removing this) works fine on the same n70.


    Below is a few things that may be useful(i have renamed my game name and cert info for obvious reasons):


    JAD
    HTML Code:
    MIDlet-Name: My Game Name Here
    
    MIDlet-Version: 1.0.21
    
    MIDlet-Vendor: Eidos
    
    MIDlet-Jar-URL: My_Game_Name_Here_Nokia_n70.jar
    
    MIDlet-Jar-Size: 297304
    
    MIDlet-1: My Game Name Here,icon.png,Main
    
    MIDlet-Icon: icon.png
    
    MicroEdition-Configuration: CLDC-1.0
    
    MicroEdition-Profile: MIDP-2.0
    
    Nokia-MIDlet-Category: Game
    
    MIDlet-Certificate-1-1:
    MyMIDlet-Certificate-1-1HereAndWorksFineOnSonyZ750i
    
    MIDlet-Certificate-1-2:
    MIIEvzCCBCigAwIBAgIQQZGhWjl4389JZWY4HUx1wjANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQG
    EwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFBy
    aW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNzE2MDAwMDAwWhcNMTQwNzE1MjM1
    OTU5WjCBtDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW
    ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93
    d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNDEuMCwGA1UEAxMlVmVyaVNpZ24gQ2xhc3MgMyBDb2Rl
    IFNpZ25pbmcgMjAwNCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL687rx+74Pr
    4DdP+wMQOL4I0ox9nfqSfxkMwmvuQlKM3tMcSBMl6sFjevlRZe7Tqjv18JScK/vyZtQk2vf1
    4DdP+n24Z
    OTa80KN2CB4iJyRsOJEn4oRJrhuKof0lgiwQMOhxqyjod0pR8ezN+PBU1G/A420Kj9nYZI1j
    OTa80KN2CB4iJyRsOJEn4oRJrhuKof0lgiwQMOhxqyjod0pR8ezN+si1O
    J/aFDv5t4ymZ4oVHfC2Gf+hXj61nwjMykRMg/KkjFJptwoRLdmgE1XEsXSH6iA0m/R8tkSvnAVVN
    8m01KILf2WtcttbZqoH9X82DumOd0CL8qTtCabKOOrW8tJ4PXsTqLIKLKP1TCJbdtQEg0fmlGOfA
    7lFwN+G2BUhSSG846sPobHtEhLsCAwEAAaOCAaAwggGcMBIGA1UdEwEB/wQIMAYBAf8CAQAw
    7lFwN+RAYD
    VR0gBD0wOzA5BgtghkgBhvhFAQcXAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2ln
    bi5jb20vcnBhMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMu
    Y3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDAzAOBgNVHQ8BAf8EBAMCAQYwEQYJYIZI
    AYb4QgEBBAQDAgABMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFDbGFzczNDQTIwNDgtMS00MzAd
    BgNVHQ4EFgQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcwgYAGA1UdIwR5MHehY6RhMF8xCzAJBgNV
    BgNVHQ4EFgQUCPVR6Pv+PT1kNnxoz1t4qN+BAYT
    AlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE3MDUGA1UECxMuQ2xhc3MgMyBQdWJsaWMgUHJp
    bWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIQcLrkHRDZKTS2OMp7A8y6vzANBgkqhkiG9w0B
    AQUFAAOBgQCuOhe4SntV+mRV7ECk7UlBkJmcibyvLh3KeCP5HBkPf+tovDLZiDje3D/TibQ/
    AQUFAAOBgQCuOhe4SntV+mRV7ECk7UlBkJmcibyvLh3KeCP5HBkPf+sYKW
    8aRauu0uJtPefAFuAAoApAaSEUgJQPkcGHlnIyTgu9XhUK4b9Q7d4C6BzYCjbFJPkXVViroi8tLq
    QXWIL2NVfR5UWpVZytk0gcBfXvZ6tQ==
    
    MIDlet-Certificate-1-3:
    MIICPDCCAaUCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhvcNAQECBQAwXzELMAkGA1UEBhMCVVMx
    FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAzIFB1YmxpYyBQcmltYXJ5
    IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2MDEyOTAwMDAwMFoXDTI4MDgwMTIzNTk1OVow
    XzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAz
    IFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUA
    A4GNADCBiQKBgQDJXFme8huKARS0EN8EQNvjV69qRUCPhAwL0TPZ2RHP7gJYHyX3KqhEBarsAx94
    f56TuZoAqiN91qyFomNFx3InzPRMxnVx0jnvT0Lwdd8KkMaOIG+YD/isI19wKTakyYbnsZog
    f56TuZoAqiN91qyFomNFx3InzPRMxnVx0jnvT0Lwdd8KkMaOIG+y1Ol
    hec9vn2a/iRFM9x2Fe0PonFkTGUugWhFpwIDAQABMA0GCSqGSIb3DQEBAgUAA4GBALtMEivPLCYA
    TxQT3ab7/AoRhIzzKBxnki98tsX63/Dolbwdj2wsqFHMc9ikwFPwTtYmwHYBV4GSXiHx0bH/59Ah
    WM1pF+NEHJwZRDmJXNycAA9WjQKZ7aKQRUzkuxCkPfAyAw7xzvjoyVGM5mKf5p/AfbdynMk2
    WM1pF+Omuf
    Tqj/ZA1k
    
    MIDlet-Jar-RSA-SHA1:
    NCJIomSc9Th9SX1wh8M2V/7kSw6lgL891AmjUMGZ+79Gbe4VChGVBvvGYNwZvAb0/muK8oF8xXUC
    lV/mCtEhdtQhsfMFTEcLrDM656QRW6MHmEjquSTrnVM47GnBU7CA2KssUjwk6UZ0gn/2xq71AMjK
    IiD9BehuWWsfbcjfbNg=
    JAD -showcert
    HTML Code:
    C:\Program Files\Java\WTK2.5.2\bin>java -jar jadTool.jar -showcert -all -inputjad C:\KaneAndLynch_Nokia_n70.jad
    
     
    
    MIDlet-Certificate-1-1:
    
     
    
    Subject: CN=MyCommonNameHere, OU=MyOUhere, OU=Digital ID Class 3 - Java O
    
    bject Signing, O=MyOrgHere, L=city, ST=state, C=AU
    
    Issuer : CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at [url]https://ww[/url]
    
    w.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
    
    Serial number: 5477f09b9129ba8bcdd458d876e2fb8e
    
    Valid from Fri Feb 29 10:30:00 CST 2008 to Wed Mar 03 10:29:59 CST 2010
    
    Certificate fingerprints:
    
      MD5: c5:1e:fc:70:f3:d2:f6:9d:a4:64:76:3d:c2:82:aa:88
    
      SHA: 57:2e:78:5f:5e:8d:0d:09:8b:e8:d2:55:2a:eb:7d:9b:42:c3:98:66
    
     
    
    MIDlet-Certificate-1-2:
    
     
    
    Subject: CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at [url]https://ww[/url]
    
    w.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
    
    Issuer : OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
    
    C=US
    
    Serial number: 4191a15a3978dfcf496566381d4c75c2
    
    Valid from Fri Jul 16 09:30:00 CST 2004 to Wed Jul 16 09:29:59 CST 2014
    
    Certificate fingerprints:
    
      MD5: 63:fe:60:c5:5a:44:af:8e:e2:11:5a:27:62:2a:b0:7c
    
      SHA: 19:7a:4a:eb:db:25:f0:17:00:79:bb:8c:73:cb:2d:65:5e:00:18:a4
    
     
    
    MIDlet-Certificate-1-3:
    
     
    
    Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
    
    C=US
    
    Issuer : OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.",
    
    C=US
    
    Serial number: 70bae41d10d92934b638ca7b03ccbabf
    
    Valid from Mon Jan 29 10:30:00 CST 1996 to Wed Aug 02 09:29:59 CST 2028
    
    Certificate fingerprints:
    
      MD5: 10:fc:63:5d:f6:26:3e:0d:f3:25:be:5f:79:cd:67:67
    
      SHA: 74:2c:31:92:e6:07:e4:24:eb:45:49:54:2b:e1:bb:c5:3e:61:74:e2

    KEYSTORE from WTK
    HTML Code:
    Creation Date: 3/17/08 12:02 PM
    
    Certificate chain length: 3
    
    Certificate [1]
    
    Subject: CN=MyCommonNameHere, OU=MyOUhere, OU=Digital ID Class 3 - Java Object Signing, O=MyOrgHere, L=city, ST=state, C=AU
    
    Issuer: CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
    
    Serial number: 5477f09b9129ba8bcdd458d876e2fb8e
    
    Valid from 2/29/08 10:30 AM to 3/3/10 10:29 AM
    
    Certificate fingerprints:
    
      MD5: c5:1e:fc:70:f3:d2:f6:9d:a4:64:76:3d:c2:82:aa:88
    
      SHA: 57:2e:78:5f:5e:8d:0d:09:8b:e8:d2:55:2a:eb:7d:9b:42:c3:98:66
    
    Certificate [2]
    
    Subject: CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
    
    Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
    
    Serial number: 4191a15a3978dfcf496566381d4c75c2
    
    Valid from 7/16/04 9:30 AM to 7/16/14 9:29 AM
    
    Certificate fingerprints:
    
      MD5: 63:fe:60:c5:5a:44:af:8e:e2:11:5a:27:62:2a:b0:7c
    
      SHA: 19:7a:4a:eb:db:25:f0:17:00:79:bb:8c:73:cb:2d:65:5e:00:18:a4
    
    Certificate [3]
    
    Subject: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
    
    Issuer: OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US
    
    Serial number: 70bae41d10d92934b638ca7b03ccbabf
    
    Valid from 1/29/96 10:30 AM to 8/2/28 9:29 AM
    
    Certificate fingerprints:
    
      MD5: 10:fc:63:5d:f6:26:3e:0d:f3:25:be:5f:79:cd:67:67
    
      SHA: 74:2c:31:92:e6:07:e4:24:eb:45:49:54:2b:e1:bb:c5:3e:61:74:e2

  2. #2
    Registered User
    Join Date
    Mar 2003
    Posts
    4,105
    Have you checked common pitfalls (post contains a link to several ones)?

  3. #3
    Registered User
    Join Date
    Mar 2008
    Posts
    3

    Re: Midlet - "Unable to verify certificate"

    Hey i checked most of the checked the "common pitfalls" but they seem to be alright.

    I did check on more handsets and some worked and others didnt.

    Works:
    Nokia N90
    Nokia E60
    Samsung A501
    Sony Z750i

    Dosn't Work:
    Nokia N70 (tryed on two diffrent N70's)
    Nokia N80
    Nokia N95

    I asked Telstra(Aus) and they said they had issues with some nokia's with verisign and had to make changes to the MIDlet itself but couldnt remember what.

    Any Ideas?

    Thanks.
    Last edited by Complistic; 2008-03-26 at 05:49.

  4. #4
    Registered User
    Join Date
    Mar 2003
    Posts
    4,105
    Which common pitfalls did you not check?

  5. #5
    Registered User
    Join Date
    Mar 2008
    Posts
    3

    Re: Midlet - "Unable to verify certificate"

    Well i got it to work on S60 handsets!

    I re-built the game in netbeans and imported my kestore and signed it on build prosess... and it worked!!! though my jad is the same...

    So my guess is that the S60 toolkit changes something inside the jar that the java WTK does not?

    Not sure if this is the answer to everyones problems but if your recompileing builds it easyer to add the key's in netbeans anyway.

    And thanks traud for you fast/useful replys!

    David Bennett.

Similar Threads

  1. calling midlet from midlet throws SecurityException on 6600
    By brianpegan in forum Mobile Java General
    Replies: 3
    Last Post: 2010-10-25, 05:31
  2. Replies: 9
    Last Post: 2008-03-06, 18:37
  3. 技术文档:MIDP 2.0安全机制 与 MIDlet 数字签名
    By wotrust in forum [Archived] Other Programming Discussion 关于其他编程技术的讨论
    Replies: 0
    Last Post: 2006-12-30, 07:42
  4. 'Response Unknown' when downloading midlet
    By Weevil in forum Mobile Java General
    Replies: 3
    Last Post: 2004-05-30, 17:01
  5. How to create two instances of midlet
    By marquito99 in forum Mobile Java General
    Replies: 0
    Last Post: 2004-04-30, 01:33

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×