×

Discussion Board

Page 1 of 2 12 LastLast
Results 1 to 15 of 23
  1. #1
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Trusted domain midlet doens't have permissions as Nokia granted - problem solved

    Hi,

    Testing device: Nokia 6681
    Testing midlet: www.smsplanet.org/SMSPlanet.jad
    Signed: Yes, by Geotrust UTI certificate
    Testing house: www.relq.com

    As trusted 3rd party, it shoul have the following permissions (see http://ncsp.forum.nokia.com/download/?asset_id=11746, author: Janne Levula, forum Nokia, MIDP 2.0 Security Domains, page 19):

    application autoinvocation: session, oneshot, blanket, no
    net access: session, oneshot, blanket, no

    Reality on 6681:
    application autoinvocation: session, oneshot, no
    net access: session, oneshot, no

    blanket=Allways allowed
    session=Ask first tim
    oneshot=Ask every time
    no=Not allowed

    Explanation taken from the same document (Janne Levula, MIDP 2.0 Security Domains) page 8.

    Could someone help? Thanks in advance...

    Kind regards
    _____________________________
    Dusan Baranec - project supervisor
    dusan.baranec@smsplanet.org
    www.smsplanet.org
    Last edited by dusanbaranec; 2006-04-06 at 12:34. Reason: Problem solved

  2. #2
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    dusanbaranec,

    darn all these inconsistencies! I find it irritating also! It could be the carriers doing!
    Jason Glass
    http://IChiBanComputers.Com

  3. #3
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Interesting is, that SonyEricsson K600i have no problem with granting access to our signed midlet - both autostart and auto connect to HTTP are allowed.

    Dusan-

  4. #4
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    i installed on 6630 from tmobile

    heres what i have, i listed highest permission for each

    network always allowed
    messaging ask every time
    auto invok always allowed
    connecivity always allowed
    multimedia always allowed
    read always allowed
    edit always allowed

    and your signing level, is same as java verisign code signing level, i think.

    and you still have this issue, if you select blanket for network
    then blanket for auto invoke, it changes network back to ask first time

    and vice versa, the machines are out to get us...
    Jason Glass
    http://IChiBanComputers.Com

  5. #5
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    This is weird, I have this (Orange is my carrier):

    network YOU=Always allowed | ME=Ask first time
    messaging YOU=Ask every time | ME=Ask every time
    auto invok YOU=Allways allowed | ME=Ask first time
    connecivity YOU=Always allowed | ME=Ask first time
    multimedia YOU=Allways allowed | ME=Ask first time
    read YOU=Allways allowed | ME=Allways allowed
    edit YOU=Allways allowed | ME=Allways allowed

    Could we change our phones? )

    Do you understand to this? Can it be carrier dependent? Anyway as I said, SE K600i has no problems with autostart and auto-network-access. There is an option "Never ask again" and that's it...

  6. #6
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    and you have that on 6630? It probably is the carrier screwin with domain permissions then.

    but not, i did say those were just the highest grantable permissions, not neccessarily the permissions selected by default on install.

    dont want to mislead you

    someone needs to start a massive online repository with this data, and each devices carrier/branding differences

    all serious developers could take a little time to add to repository, cus in end, it would save so much development time!
    Jason Glass
    http://IChiBanComputers.Com

  7. #7
    Super Contributor
    Join Date
    Apr 2003
    Location
    USA, CA
    Posts
    7,191

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Some carriers are using a little different set of default access rights and available settings for protected APIs & trust domains (than what is specified in MIDP spec).
    Cingular for example has their settings available on their developer web site. Orange might have such a document too, I have not visited their developer site yet.

    Hartti

  8. #8
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    "i did say those were just the highest grantable permissions"...sure I understand this, I wrote my highest permissions too and as you may see its lower than yours. I have 6681.

  9. #9
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Thanks Hartti, it means that imagination that Java application behaves the same way on each MIDP 2 device is sci-fi. I lead SW company for 10 years and our target plarforms are MACs and WIN. Now I see that Java implementation is very far from similar Windows or Mac professional applications used in real business life...

    Dusan Baranec
    dusan.baranec@smsplanet.org
    www.smsplanet.org

  10. #10
    Registered User
    Join Date
    Apr 2005
    Location
    Slovakia
    Posts
    33

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Guys problem is solved, according to an answer from Satu Tasala, Project manager, Aplication Testing Services, this is "the Java implementation in Nokia 6680/81 differs from e.g. Nokia 6630 and N91. Always allowed is not available for network access or auto-start even if application is in Trusted 3rd party domain."

    I would like to thank to Satu for his effort, it solved many of our problems.

    Kind regards
    _____________________________
    Dusan Baranec - project supervisor
    dusan.baranec@smsplanet.org
    www.smsplanet.org
    Time zone: GMT +1

  11. #11
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    glad you found the cause of your problem, unfortunately still does not help with the problem though!

    We could post other problematic devices here as well, when we happen upon them!
    Jason Glass
    http://IChiBanComputers.Com

  12. #12
    Registered User
    Join Date
    Feb 2006
    Posts
    13

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Hi,

    I have two firmware versions of 6630 and the permissions are different. I don't have App auto-start "always allowed" for v5.03.08 but i do for v 3.45.113. Not sure why. Could it be that the later version enforces the operator permissions or maybe Nokia changed the trusted domain for signed midlets during versions

    Regards,
    Rasta

  13. #13
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Wow, thats nice that you have those two devices with different version firmware, usefull for testing.

    Could it be that the later version enforces the operator permissions or maybe Nokia changed the trusted domain for signed midlets during versions

    Not sure, if both devices were unbranded to a carrier, it would seem like Nokias doing, but if one device was branded, and the other not, or both devices branded from two different carriers, then I would suspect the carriers doing.
    Jason Glass
    http://IChiBanComputers.Com

  14. #14
    Registered User
    Join Date
    Feb 2006
    Posts
    13

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Thanks Jason,

    Can someone from Nokia confirm this please?

    Thanks,
    Rasta

  15. #15
    Registered User
    Join Date
    Mar 2003
    Posts
    8

    Re: Trusted domain midlet doens't have permissions as Nokia granted

    Hello,
    same exact problem here. Both on a 6600 and on a 6630, we get applications installed as trusted third party, but no blanket option available for Network Access.
    This is ridiculous, what do we have standards for if then Nokia and the operators change them as they like?
    As a result, I think we might have to tell our customer not to buy Nokias but rather buy other brands who do grant this permission to signed midlets...
    Unbelievable!

Similar Threads

  1. Success story: Signed midlet & 6600 (4.09.1)
    By random_john_doe in forum Mobile Java General
    Replies: 37
    Last Post: 2008-08-04, 12:02
  2. Nokia 9210 PC Suite & Nokia 9210 issues
    By Nokia_Archive in forum Symbian
    Replies: 4
    Last Post: 2007-09-22, 00:19
  3. Replies: 1
    Last Post: 2005-01-13, 21:01
  4. MIDlet Signing (URGENT -- PLEASE HELP ME NOKIA EXPERTS)
    By earamsey in forum Mobile Java General
    Replies: 0
    Last Post: 2004-10-25, 23:57
  5. push registry midlet in Nokia 6600/emulator
    By Wah in forum Mobile Java General
    Replies: 0
    Last Post: 2003-11-18, 09:26

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×