Discussion Board

Results 1 to 15 of 15

Hybrid View

  1. #1
    Registered User
    Join Date
    Jul 2005
    Posts
    14

    "No valid certificate" error when installing signed app

    I am getting a "No Valid Certificate" error on my Nokia 6101 (S40 DP2) when trying to install an app signed by Verisign, and the install fails. I need to sign the app to access PIM functions, otherwise I get a SecurityException. I assume this means that it can't trace my cert back to the root cert. But there are a couple Verisign Class 3 root certs on the phone.

    My jad file has these entries (I've truncated the lines):

    MIDlet-Certificate-1-1: MIIE4DCCA8igAwIBAgIQL8lZMgod9gFoS7NTpQs2MTANBg
    MIDlet-Certificate-1-2: MIIEvzCCBCigAwIBAgIQQZGhWjl4389JZWY4HUx1wjANBg
    MIDlet-Jar-RSA-SHA1: STEqCVys4O49abTBLdP/AFU4WhgyWdT1OLffwt4+44nfMcoGq

  2. #2
    Registered User
    Join Date
    Mar 2003
    Posts
    4,105
    If you click Options on the Nokia, you see which one is for code signing. Then compare the fingerprints with your's root certificate. Should we do this for you out of that hash dump?

  3. #3
    Registered User
    Join Date
    Jul 2005
    Posts
    14

    Re: "No valid certificate" error when installing signed app

    There are four Verisign Certificates on my phone used for code signing:

    Class 3 Public Primary Certification Authority - G2; Verisign
    Fingerprint: 85:37:....

    Class 3 Public Primary Certification Authority; Verisign
    Fingerprint: 74:2C:...

    Verisign Class 3 Public Primary Certification Authority - G3
    Fingerprint: 13:2D:...

    VeriSign Class 3 code signing 2001; Class 3 Public Primary Certification Authority
    Fingerprint: 2C:07:...

    And my app is signed with the following certificate:

    Issuer: CN=VeriSign Class 3 Code Signing 2004 CA

    Certificate fingerprints:
    MD5:
    8b:3e:cf:68:7b:1f:73:8e:78:b1:94:1b:94:37:1d:52
    SHA:
    ee:1b:d0:cf:ac:ef:3b:81:6a:3c:52:d2:ac:b1:59:09:23:71:7d:1a

    This doesn't match any of the above. Does this mean I don't have the right certificate on my phone?
    Last edited by molim; 2006-01-07 at 01:00. Reason: remove long lines to improve formatting

  4. #4
    Registered User
    Join Date
    Mar 2003
    Posts
    4,105
    Four Verisign code signing certificates? Are you sure? In the phone click the Options tab on each certificate and check if code siging is activated.

    Your MANIFEST implies you have a certificate chain because there a two MIDlet-Certificate fields. This means there is at least one intermediate certificate. You have checked the root certificate of yours?

    I would say you bought the wrong certificate because it is not possible to install own root certificates for Java code siging (normally – only the Nokia Series 60 Edition 2 and 3 allows this).

    If you are sure you bought the right one, ask Verisign what is up.

  5. #5
    Registered User
    Join Date
    Jul 2005
    Posts
    14
    aaaaaaaaaa
    Last edited by molim; 2006-01-07 at 00:59. Reason: removed post because long lines caused poor formatting

  6. #6
    Registered User
    Join Date
    Jul 2005
    Posts
    14

    Re: "No valid certificate" error when installing signed app

    Yes, there are 4 Verisign code signing certs are on the 6101. They all have an 'X' by "App. Signing", which I assume is the same as code signing. I listed their names in my previous post.

    Today I got my app to run in the OTA simulation in Sun WTK 2.3 which allows you to add and delete root certificates (Utilities -> Manage Certificates). I verified that the app would not load if the Verisign certificate was deleted (Class 3 Public Primary Certification Authority). Also, I got it to run in NDS using the Nokia Prototype SDKs 2, 3, and 4, using the "Real Life" option in the SDK preferences, which is supposed to simulate a real download/code authentication. Therefore, I think that the code signing is correct. However, it will not run using the Nokia_S40_DP20_SDK_6230i. It gives the same error "No valid certificate" as I get when I run it on the actual phone (6101). Therefore, I suspect some problem or incompatibility with the 6101 and 6230i.

    If anyone knows of a way to add a root certificate to the 6230i emulator, or to view/edit the root certificates in the Nokia Prototype SDKs, please let me know. That would help with my investigation.

    And if anyone was able to get their signed app to load on a S40 DP2 (or DP3) phone, please let me know the signer and the phone model.

    In fact the error I'm getting can be reproduced in the NDS using just the jad file and the 6230i emulator (uncheck "Overrule default handset behavior" under preferences, no jar file necessary):

    MIDlet-Name: MR
    MIDlet-Version: 1.0
    MIDlet-Vendor: IW
    MicroEdition-Profile: MIDP-2.0
    MicroEdition-Configuration: CLDC-1.1
    MIDlet-Jar-URL: MR.jar
    MIDlet-Jar-Size: 49590
    MIDlet-Permissions: javax.microedition.pim.ContactList.read, javax.microedition.pim.ContactList.write
    MIDlet-1: MR, ,MR
    [ see post above for missing lines ]

    Any help is greatly appreciated. :-)

    Thanks,
    Matt
    Last edited by molim; 2006-01-05 at 05:48. Reason: fix formatting of previous post

  7. #7
    Registered User
    Join Date
    Apr 2013
    Posts
    1

    Re: "No valid certificate" error when installing signed app

    no valid certificate occur while downloading

  8. #8
    Super Contributor
    Join Date
    Nov 2003
    Location
    Bangalore , India
    Posts
    4,430

    Re: "No valid certificate" error when installing signed app

    Quote Originally Posted by ashish@nokia.com View Post
    no valid certificate occur while downloading
    Hi ashish! Welcome to Nokia Developer Discussion Boards!!

    Are you a software Developer or an end user ? Please note this discussion board is only for mobile App development related issues. If you are a developer, please explain your issue, so that we can better support you.

    Regards
    Gopal
    Twitter : @balagopalks
    Linkedin : @balagopalks

  9. #9
    Registered User
    Join Date
    Jun 2013
    Posts
    1

    Re: "No valid certificate" error when installing signed app

    Hello all,

    I have same issue, i am getting same error ("invalid certificate please contact service provider ")on my nokia E71 when i am trying to install application signed by verisign. I signed my jad file with following
    http://www.codeproject.com/Articles/...-a-J2ME-Midlet.

    Do we need to install certificate into mobile? If yes than how can we do that? right now i am just transfering jad and jar file to device via USB.

    Please help me on this thanks in advance

  10. #10
    Nokia Developer Champion
    Join Date
    Feb 2009
    Location
    Noida, India
    Posts
    3,087

    Re: "No valid certificate" error when installing signed app

    right now i am just transfering jad and jar file to device via USB.
    Try OTA download via JAD file URL.

    Also go thu - certificate/signing related FAQ type Q&A - at
    http://developer.nokia.com/Community...before-posting
    thanks,
    ~Amitabh
    (Champion of the Month -Aug'13)
    Follow me on my blog for Innovative Mobile Apps

Similar Threads

  1. "No valid certificate" error when installing signed app
    By molim in forum Mobile Java Tools & SDKs
    Replies: 0
    Last Post: 2005-12-31, 20:53
  2. Installing signed application
    By hrdonka in forum Mobile Java General
    Replies: 4
    Last Post: 2005-10-19, 07:22
  3. "Memory full" on installing app on 3650
    By Stengun in forum Mobile Java General
    Replies: 0
    Last Post: 2004-04-26, 23:46
  4. broken path when installing app in memory
    By evanyzer in forum Symbian
    Replies: 4
    Last Post: 2004-02-13, 03:21
  5. error installing app on 6100
    By kenlmf in forum Mobile Java General
    Replies: 0
    Last Post: 2003-04-09, 04:55

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×