×

Discussion Board

Results 1 to 7 of 7
  1. #1
    Registered User
    Join Date
    Mar 2003
    Posts
    8

    Thawte code signing certificates unsupported on Nokia phones?

    Hello,

    we have acquired a Java code signing certificate from Thawte (CA = "Thawte Code Signing CA") and we are trying to use it to sign midlets for Nokia 6600 and 6630 phones - in both cases, unsuccessfully up to now.

    Now, if I go to the list of root certificates on the phones, in both of them I only see two Thawte certificates - "Thawte Premium Server CA" and "Thawte Server CA". While chatting with Thawte support, they confirmed that those two are used for SSL certificates for HTTPS browsing, but that midlets should be signed with the Code Signing one instead. They swear that at least the Nokia 6600 should support midlets signed with their certificate, but it doesn't work and the root certificate does not seem to be there.

    Did anyone ever successfully use Thawte certificates to sign midlets for Nokia 6600 and 6630 phones? Any suggestion?

    (In particular, my signing process only generates one MIDlet-Certificate-1-1 line - no 1-2 line - and I'd like to know whether this is the correct behaviour for Thawte certs.)

    Thanks in advance,

  2. #2
    Super Contributor
    Join Date
    Nov 2003
    Location
    Bangalore , India
    Posts
    4,429

    Re: Thawte code signing certificates unsupported on Nokia phones?

    Regarding signing in different S60 phones, Hope this link is of some interest.
    http://discussion.forum.nokia.com/fo...hlight=signing

    Regards
    Gopal

  3. #3
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Thawte code signing certificates unsupported on Nokia phones?

    and nokia ron is in process of trying to create a "signing only" thread/forum, he is keeping us posted as to its future whereabouts

    http://discussion.forum.nokia.com/fo...d.php?p=201239

    yeah!
    Jason Glass
    http://IChiBanComputers.Com

  4. #4
    Registered User
    Join Date
    Mar 2003
    Posts
    8

    Re: Thawte code signing certificates unsupported on Nokia phones?

    Thanks.
    Actually I think my idea is right: if I install (via bluetooth) Thawte's "Code Signing CA" root certificate (you can download it from www.thawte.com/roots), then my midlets are installed correctly!
    So these "nice" people from Thawte are selling you certificates that (according to them) "work with Nokia phones"... but don't tell you that Nokia doesn't support their CA, and you need to install the root cert by hand - which is something you can do in certain types of applications, but not if you need to do mass deployment.
    Moreover, I now have an extra problem: the midlets are installed as "trusted third party", but - even if I put javax...http in the MIDlet-Permissions - I don't get the "blanket" option (= "always allow without asking") available in the "Net Access" set of permissions!
    Will open a separate thread on that one.

  5. #5
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Thawte code signing certificates unsupported on Nokia phones?

    good luck dfun, as to blanket, third party signing gives me always allow using verisign cert for almost I believe all permission domains, except for sms believe it or not.

    but, when i set network access to alwways allowed, then set push/autoinvoke to always allowed, the device, automatically adjusts the network settings back to ask once, and then the same occurs if i do it vice versa.

    i would not assume anything when it comes to the reliability of domain permissions and yours or any cert on Nokia, as well as ALL other devices

    The device may do one thing if unbranded by a carrier, i.e. straight from Nokia, but if branded, it might have completely diff. characteristics

    Example devices: Nokia 6101 Branded to TMobile, Nokia 6102 branded to Cingular

    Networked Midlet can create http connections on unbranded of these devices, but on branded, the midlet is not even allowed or given internet access, regardless of third party signing status
    Jason Glass
    http://IChiBanComputers.Com

  6. #6
    Registered User
    Join Date
    Dec 2006
    Posts
    5

    Re: Thawte code signing certificates unsupported on Nokia phones?

    We also ran into a problem with our thawte cert on a nokia 6600 phone. When we tried to install OTA it failed, however, on inspection of the root cert we discovered that by default the permission to install was set deny. When we changed this everything started working for us.

    Note that we are also using SMS instead of data connections.

  7. #7
    Super Contributor
    Join Date
    Mar 2006
    Location
    Phoenix, AZ. USA
    Posts
    556

    Re: Thawte code signing certificates unsupported on Nokia phones?

    jstreb, so it lets you programmatically use sms, but not internet connections? Just wondering, as I didnt try the sms because the http failed?
    Jason Glass
    http://IChiBanComputers.Com

Similar Threads

  1. which phones for laptop
    By dvdljns in forum PC Suite API and PC Connectivity SDK
    Replies: 2
    Last Post: 2006-02-14, 12:58
  2. Replies: 3
    Last Post: 2006-01-04, 11:58
  3. Nokia 7650 support Bluetooth audo?
    By ovjo12 in forum Bluetooth Technology
    Replies: 5
    Last Post: 2003-07-17, 18:50
  4. Replies: 0
    Last Post: 2002-12-04, 15:46

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
×