Signed midlet: ok with E60, fails on 6680

[manupeco]

Hi,
I have a Verisign certificate (Verisign Class3 Code Signing 2004 CA). I signed the application and it works on Nokia E60, 6230 and 6230i but on Nokia 6680 I get 'Installation security error".
The setting for App.Manager is "Software installation: On" and for all the certificates of Class 3 I have "App. installation: Yes".

It seems both phone have the same certificates...

What's wrong on 6680?


Thanks
Emanuele Pecorari

[hartti]

What APIs are you using? Are all those available on 6680 too?
Is the 6680 a operator branded phone? If yes, which operator?

you can find the available certificates on 6230 going to the Browser (Services?) and checking the certificates from there. (Unfortunately I do not remember the exact menu path off the top of my head).

Hartti

[traud]

After checking the installed certificates (operator-variant?) and requested permissions (make them opt-) as hartti pointed out, check the date/time settings. Then make sure your JAD contains the VeriSign intermediate. The Nokia E60 has this on board, so you might miss that bug in your JAD.

A VeriSign should work on all these three except this is some operator-variant. If all this fails, please post the content of your JAD unshortened in a code tag.

[manupeco]

What APIs are you using? Are all those available on 6680 too?
Is the 6680 a operator branded phone? If yes, which operator?

you can find the available certificates on 6230 going to the Browser (Services?) and checking the certificates from there. (Unfortunately I do not remember the exact menu path off the top of my head).

Hartti

The API I'm using are the follows:

MIDlet-Permissions: javax.microedition.io.Connector.socket
MIDlet-Permissions-Opt: javax.microedition.pim.ContactList.read,javax.microedition.pim.ContactList.write,javax.microedition.io.Connector.file.read

and I think 6680 support them. The phone is not branded by any operator. I'll check the certificates on 6230 and I'll tell you about this checking.

Any other suggests?

I have another test result to add: on Nokia 6230i and 6230, the signed application works fine.

Thanks for the moment

Emanuele

[manupeco]

After checking the installed certificates (operator-variant?) and requested permissions (make them opt-) as hartti pointed out, check the date/time settings. Then make sure your JAD contains the VeriSign intermediate. The Nokia E60 has this on board, so you might miss that bug in your JAD.

A VeriSign should work on all these three except this is some operator-variant. If all this fails, please post the content of your JAD unshortened in a code tag.

Hi,
my date settings are mm/dd/yyyy but I tried also with dd/mm/yyyy. And, if it would be the date settings then have my customer to change their data settings to install the midlet? I find this issue not valid for a mass market application.

My Jad contains the Verisign Intermediate...and this is my Jad:

MIDlet-Name: MyApp
MIDlet-Version: 0.8.56
MIDlet-Vendor: MyVendor
MIDlet-Jar-URL: Nokia_E60_0.8.56_en.jar
MIDlet-Jar-Size: 301671
MIDlet-Icon: /myapp.png
MIDlet-Data-Size: 20000
MIDlet-1: MyApp,/myapp.png,com.myApp.MyApp
MIDlet-Permissions: javax.microedition.io.Connector.socket
MIDlet-Permissions-Opt: javax.microedition.pim.ContactList.read,javax.microedition.pim.ContactList.write,javax.microedition.io.Connector.file.read
Copyright: Vendor 2006
MIDlet-Certificate-1-1: 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
MIDlet-Certificate-1-2: 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
MIDlet-Jar-RSA-SHA1: ahFb80eLOd26tF379Rd6FkCHZQ8lgnSsaGgKHq/AlKUMQYvrJcj4gb2DPNRKG14sOYH4Xgdo8BDhSuI564pX9ASt8M+7ff7w6oJW34iBNSSDzxePVMUBG27y9ctf9K14KQeuEdK36pwvEsHiUJLieKlIN11mTEyZ+LtK0l+0PTQ=

That's all....

Thank you for your help

Emanuele Pecorari

[manupeco]

Setting the right date on 6680 the application work....

I can change the settings about some API (Read/User data for example) but not for Network connectivity.

Is it normal?

Thanks for your suggests.

Thanks
Emanuele Pecorari

[traud]

Yes, signing in Nokia S60 2nd Edition – at least the Nokia 6680 – for 3rd-party level does not make much sense except for JSR-75. The permissions are a bit screwed.