Installing Root Certificate

[saravanak8]

Hi,

Kindly advise how to install root certificate from CA onto Nokia 6131.

I copied .CER file on my phone, but it seems that the phone does not recognize the format.

[RicardoPortela]

You cannot install a certificate on the phone. It is just not possible in series 40.
The phone has a fixed set of trust anchors, which you cannot change.
You must buy a certificate from a company that has it's certificate already installed on the phone.
Examples are Verisign or Thawte.

[super_beda]

I found a free certificate from GeoTrust-Equifax at:

http://www.geotrust.com/resources/ro...ineandWireless

This is one of those included in the certificate list in the phone and it is completely free.
Now how can I sign my midlet?
I created a new key pair using Carbide.j(Eclipse plugin) with my personal data and then imported the certificate from Equifax and correclty signed my midlet. But when I deploy it on my phone and try to start it the phone displays the alert:
"certificate not on phone or SIM!"
So, where is the problem what am I doing wrong?

[joe.scheidegger]

you need more that the certificate from geotrust for sign your midlet.
you must have your own trusted certificate(from versign or thawte) and sign the midlet.
i have used one from thawte and it works well!

[super_beda]

Ok, thank you.
I will try with the one from thawte(It is the JavaSoft one,isn't it?) even if it is not so cheap...

[joe.scheidegger]

Yes, the JavaSoft is the right one!

[tgkprog@gmail.com]

hi i bought a new cert from thawte today but it does not work

can u tell me which version of java u used to sign?

also i supposed u only signed the jad with jadtool and not the jar with jarsigner?

did u make jar manually or with eclipse or other tool?

thanks

[tgkprog@gmail.com]

ref my thread on thawte and signing http://discussion.forum.nokia.com/fo...451#post365451

[zhs_bravo]

A step by step process of Application Signing

http://media.csee.ltu.se/courses/D70...ionsigning.php

You can take few steps from whole process to achieve application signing!

[tgkprog@gmail.com]

u need to use IE? for what- imported into ie then exported again what use is that?

was it a Certificate Type : PKCS #7 Certificate Chain ??

[zhs_bravo]

IE is only used to manage certificate (import .cer file and then export in different format)

[tgkprog@gmail.com]

oh ok unfortunately i did not backup my store before i imported the cert from tharte and now it wont let me import the same cert in new format

so got to ask for a re issue ... learning is back it up!

[zhs_bravo]

when you import new format into your keystore then have a look at the certificate list, it may add more certificates.

In that case, when you sign your JAD file, just open JAD file and remove certificate that you dont need. It happened with me in the beginning and I did the same and after when i came to know that which certificate to remove, i used my backup copy of keystore to import certificate and then dont need to remove from JAD file

[tgkprog@gmail.com]

hi thanks ZHS ,

Its working! the keystore was not RSA - made a new one got cert replaced.

Also, there was a mismatch in manifest and jad - the hosts (cell phone, emulator) were not catching it unless signed - go figure

what really helped was using the java emulators 'Run from OTA' - that gave u a clue before failing like 'Manifest version not correct ' (i removed that optional entry)

anyway thank God! Yippie!

and i need to import to IE and export too else got a keytool error: java.lang.Exception: Input not an X.509 certificate

so thanks for that tutorial
http://media.csee.ltu.se/courses/D70...ionsigning.php

[tgkprog@gmail.com]

Does anyone know how to sign with 2 certificates - one from Verisign and other from Thawte? or need to keep seperate jads?