×

Discussion Board

Results 1 to 11 of 11
  1. #1
    Regular Contributor
    Join Date
    Dec 2007
    Posts
    74

    Code Signing Certificate expiration after 1 year

    Hello,

    Lets suppose that i am using Verisign Code Signing Certificate(1 year) to sign my java apps/james and then i upload them to ovi store. My applications are accepted and they go live. After one year the certificate "expires" and my applications are no longer considered "Trusted". What happens then? Do Nokia OVI store automatically makes them No available? Is there a solution for that?


    Thanks

    Nik

  2. #2
    Registered User
    Join Date
    Mar 2009
    Location
    Gdansk, Poland
    Posts
    139

    Re: Code Signing Certificate expiration after 1 year

    When you submit, you have to give them 'end of distribution' date, which must be no later than the date when your cert expires. I assume after the 'end of distribution' date, the content will be automatically taken off the store.

  3. #3
    Regular Contributor
    Join Date
    Dec 2007
    Posts
    74

    Re: Code Signing Certificate expiration after 1 year

    Utumno,

    Thanks! Clean and Easy. That is what i needed!

    Nikos.

  4. #4
    Nokia Developer Champion
    Join Date
    Apr 2005
    Location
    Boston
    Posts
    517

    Re: Code Signing Certificate expiration after 1 year

    Ciao,

    just to continue the discussion.
    I used the trustcenter to sign sis files.
    Now, I just received an email from them for getting a new certificate (they do not do renewal).

    So, couple of questions.
    1 - will the symbian singed sis work after the certificate is exapired? User will just get "untrusted" message when installing? The exparation for the certificate is 10 years, so my guess is no until 10 expires.
    2 - anyone knows a certificate that is multi-year valid to do symbian signed? I do not want to request one every year.

    Alessandro
    Last edited by biskero; 2010-03-11 at 10:26.

  5. #5
    Regular Contributor
    Join Date
    Sep 2005
    Posts
    138

    Re: Code Signing Certificate expiration after 1 year

    I have another question

    I have developed a Java ME app. I'm thinking of buy a Thawte certificate, because Java Verified is a nightmare and Verisign doesn't work with Nokia S40 5th edition.

    Thawte certificate cost about 300$/year. If I sign today an App. with a Thawte certificate that expires after one year, and if I install the App. today: What will happend one year in the future when I will run my application?

    Thank you!

  6. #6
    Registered User
    Join Date
    Dec 2004
    Posts
    369

    Re: Code Signing Certificate expiration after 1 year

    the time frame of 1 year relates to the time which you can install the app with that certificate, but once it is installed it will work for ever.

  7. #7
    Regular Contributor
    Join Date
    Sep 2005
    Posts
    138

    Re: Code Signing Certificate expiration after 1 year

    Quote Originally Posted by shaii View Post
    the time frame of 1 year relates to the time which you can install the app with that certificate, but once it is installed it will work for ever.
    Thank you very much!!!

    Do you recommend the certificate from Thawte? I think that is the cheapest and easiest way to publish on Ovi.

    Verisign is very expensive and doen's works with Nokia S40 5º Ed, and Java Verified Program is the hell!

  8. #8
    Registered User
    Join Date
    Dec 2004
    Posts
    369

    Re: Code Signing Certificate expiration after 1 year

    Thawte also doesnt work on all handsets
    search the forum and nokia wiki on certificates for details

  9. #9
    Nokia Developer Expert
    Join Date
    Mar 2010
    Posts
    60

    Re: Code Signing Certificate expiration after 1 year

    Quote Originally Posted by Pepper_91 View Post
    Thank you very much!!!

    Do you recommend the certificate from Thawte? I think that is the cheapest and easiest way to publish on Ovi.

    Verisign is very expensive and doen's works with Nokia S40 5º Ed, and Java Verified Program is the hell!
    Dear Pepper_91,

    There are different types of certificates you can choose from.

    Java verified certificate is valid for the longest time.
    Verisign certificate does not work in S40 5th edition and 5th edition FP1.
    Thawte certificate does not work in 5320 and 6210. For more information, please refer to http://javaverified.com/.

    There is only 1 type of certificate for symbian signed. For more information, please refer to https://www.symbiansigned.com/app/page.

    If you have any questions, please contact us at publishtoovi.support@nokia.com

    Thank you.

  10. #10
    Registered User
    Join Date
    Mar 2010
    Posts
    1

    Question Re: Code Signing Certificate expiration after 1 year

    Hi Shaii,

    I just made a long chat with thawte technical support. I asked them whether the downloaded apps will still work as trusted or the privileged functions will stop.

    Unfortunately he said the the privileged functions will stop ! and you must resign the app and redistribute !!

    I personally think your opinion is more logical, did you personally pass a similar experience ??
    I hope the tech support member with whom I talked was out of correctness.
    Last edited by elkaragy; 2010-05-12 at 16:07. Reason: correcting some words

  11. #11
    Registered User
    Join Date
    Dec 2004
    Posts
    369

    Re: Code Signing Certificate expiration after 1 year

    Hi,
    i am 100% sure of what i wrote.
    any j2me app that was installed with a 3rd party certificate that was valid during the installation will remain in the 3rd party trusted domain indefinitely (with the permission you have configured in the jad).
    once the certificate expires u should get a new certificate and re-sign the app for future releases & installation but it wont affect any app that was already installed with the old certificate.

Similar Threads

  1. Automatic code signing for open source J2ME Apps?
    By gagravarr in forum Series 40 & S60 Platform Feedback Archive
    Replies: 3
    Last Post: 2008-05-12, 06:09
  2. Certificate signing problems
    By martin.wainamoinen in forum Mobile Java General
    Replies: 34
    Last Post: 2008-01-22, 19:45
  3. Code signing & OCSP
    By tiffani2k3 in forum Mobile Java General
    Replies: 2
    Last Post: 2007-03-09, 11:50
  4. Self-signed CA certificate
    By blackbuddha in forum Mobile Java Networking & Messaging & Security
    Replies: 6
    Last Post: 2006-07-25, 11:03

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×