Sign a Midlet with Verisign

[PeppeM2]

Open WTK 2.5.1
Open Sign Midlet Utilities
Make a new key pair
Generate CSR
Send CSR to verisign
Obtain Certificate from verisign
Save it into a text file with .cer extension


I install portecle.
Then load into it a keystore with keypair that make csr..
load into keypair a ca response.
save keystore and use it to sign midlet.

I install into nokia n73.
Install successful but the http permission is asked anyway.

What's wrong?

[hartti]

So the signing was successful, as you were able to install the signed MIDlet.

The default access rights for signed midlets is NOT "always allowed". You have to change them manually to less restrictive ones.
On S60 phones you can change the API access settings in Application Manager.

Note also the even trusted 3rd party MIDlets do not have "always available" as an option for all API groups. Notable exception is messaging, where the highest available option for signed midlets is "ask always"

Hartti

[PeppeM2]

So, the only way to set "always allowed" is to set it manually?
Is the only way also with a signed midlet?

I wish to minimize the user interaction for net access and push registry..

[hartti]

Correct.
And yes.

Check this wiki article for more guidance (it is still incomplete, but contains also the API access right tables from MIDP specs)
http://wiki.forum.nokia.com/index.ph...curity_Domains

You seem to be working with S60 phones, but in case you want to use Series 40 phones too, note also this known issue
http://www.forum.nokia.com/document/...40_MIDlets.htm

Hartti

[PeppeM2]

Many thanks for the response!

I would to ask another question.

My post is about a simple helloworld midlet, that I signed and install on device correctly.

But if I try to install more complex project signed I can't install on device, because at the end of installation it show authorizasion failed (on n73 and 6630).

The keystore that I use for signing is the same!

[PeppeM2]

I found the problem:

This jad string make the error:

MIDlet-Push-1: sms://:6543,package1.Midlet,*

But I don't understand the reason..

[PeppeM2]

I found the reason:

If I put pushregistry jad static registration I must authorize by jad permission pushregistry and sms (if push registry listen for sms).

[ricardopcunha]

Hi, in the specification of N73, from this site, say only uti root is a valid certification for this phone, but I see some people get to sign jar without UTI root, using Verisign.

[eraddatz]

yes... you have to add this permission on your jad file

MIDlet-Permissions: javax.wireless.messaging.sms.receive,javax.microedition.io.Connector.sms,javax.microedition.io.PushRegistry

you have some problem with sms push registry??
I can't do it work, when I recive the sms the application isn't trigger

[traud]

ricardopcunha, please let us continue there …