Thawte sign not working on nokia 5300

[tgkprog@gmail.com]

Hello ,


Has anyone got a thawte certificate in the last 1-3 months and its working? Or not working ?

I have a new certificate from Thawte. When I sign my midlet I get 4 lines in the jad -
MIDlet-Jar-RSA-SHA1:
MIDlet-Certificate-1-1:
MIDlet-Certificate-1-2:
MIDlet-Certificate-1-3:

and it does not work. my Nokia 5300 says 'Application not supported'

if i remove these 4 lines the application works fine - but is not signed.

Right now I give it permission to send SMS but later I want the certificate to be present and not prompt for this.

I signed it using Eclipse (downloaded latest today before this was using Textpad on this computer)

I transfer the app using a cable and the Nokia application installer (tried copy paste to a custom folder too)

Sign: tried manually too -
java -jar %jad% -addcert -alias Sree_Sarvamangala_Developer_Private_Ltd -keystore %ks% -inputjad PrivateMessage2.jad -outputjad PrivateMessage2.jad

java -jar %jad% -addcert -alias Sree_Sarvamangala_Developer_Private_Ltd -keystore %ks% -inputjad PrivateMessage2.jad -outputjad PrivateMessage2.jad

I tried by fist jarsigning the jar (after reading some blog which said we need to that - and by the usual documentation way - jar is left untouched only change jad)

FYI the cert seems to be ok as I could sign an applet that read from my local system - it worked in IE and Opera (jarsigned the applet archive)


Could the app not be supported cause I get MIDlet-Certificate-1-3: - everywhere I read it mentions 1 and 2 only

thank you in advance for advice and sharing know-how

Good day

Regards
Tushar Kapila
http://sel2in.in

http://tusharkapila.blogspot.com/

Volunteer computer Cancer cures www.worldcommunitygrid.org
Click: www.thehungersite.com , and www.bhookh.com feed hungry , its free. www.ecologyfund.com
Please add these to your start-up how to: http://tusharkapila.blogspot.com/200...00000s-of.html

[tgkprog@gmail.com]

if u have net on your phone please test these links
when you invoke the app it only checks if messaging api is there and has a Start option if it is; else it exits. so its safe to run to see if its supported.

The signed jad with jar are at http://sel2in.in/prjs/pm/r01/

and without sign http://sel2in.in/prjs/pm/r01/noSign/

Exact sign entry in jad
MIDlet-Jar-RSA-SHA1: c+C4PCP2mf0NZxt4KMz+k73flbCNKMIWl+B8yMFrbpHNPmRqlrDHv/VRlG8o3y9VemR1DTZmpvHR7KG/yypcv2wLsRSl/4lbotNRJPY8uh5C9RvjFm4/lmk/+TR9rh5lHdMUVxZxmQrG7neP0nv1i8/bU/zsCrM0S7MsskGXnqY=
MIDlet-Certificate-1-1: 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
MIDlet-Certificate-1-2: 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
MIDlet-Certificate-1-3: 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

[tgkprog@gmail.com]

I used jsk1.6 can that be an issue? need to use 1.5?

[tgkprog@gmail.com]

I checked the Thawte entry on my phones Security/ Authority Certificates - Thawte is selected to be used for all 3 - Apps signing, Cross verification and Server authenticate.

I just spent 14 hours over 3 days getting a Thawte cert only to find out that though most phones (including my Nokia 5300, 3110c and customers other hand sets do not have Thawte premium root certificate (meaning its useless for java midlets) need to use the more expensive Verisign. they say they pass the info on to Verisign as its the same co now! fingers crossed.

now real question/ suggestion : can't nokia publish what are the phones and what are the premium certificates on each? now when I go on my phones Menu/ Settings/ security settings - Authority Certificates I can see when I open the Thawte one that its not he premium one. The technical person at Thawte told me that's what we need. and I can see that there are two verisign certificates and one does say its the Class 3 Primary - that's the one we need.

[traud]

Have you tried without MIDlet-Certificate-1-3?

[tgkprog@gmail.com]

hi yes tried that and tried to sync the time on the computer and handset too - but they already where the same.

Like I said in my previous post - the thawte root is not there on this or other 4 phones we tested with. Hopefully the verisign cert will work but that will take a few days to procure.

[tziranda]

We are using a Thawte certificate with less than 1 month (valid from the 25th of November) and it validates on a Nokia 5300 (one of our test phones) and we can set the restricted permissions without problems. This model does seem to have its quirks though (I might post about this later).
Hope it helps.
João
Tziranda, SA

[hartti]

Unfortunately I cannot access the jad and jar files you linked to. So: Do you have all the required permissions requested in the jad?

Hartti

[tgkprog@gmail.com]

tziranda
was it a Certificate Type : PKCS #7 Certificate Chain ??

can you please sign a test app and put it on a server

or can you test this app http://sel2in.in/prjs/pm/r01/cert/

you can download the jad and jar remove the signature and sign with yours too - so i can test on my 5300

or from http://sel2in.in/prjs/pm/r01/noSign/


Its also here http://new4tk.googlepages.com/m1.html but ehre u need to download and install as this site does not have the mime types set up

thank you

Permissions are

MIDlet-Permissions: javax.microedition.io.PushRegistry, javax.microedition.io.Connector.sms, javax.wireless.messaging.sms.receive,javax.wireless.messaging.sms.send,javax.microedition.io.Connector.cbs,javax.wireless.messaging.cbs.receive,javax.microedition.io.Connector.mms,javax.wireless.messaging.mms.receive
MIDlet-Permissions-Opt: javax.wireless.messaging.mms.send

this app works fine in my nokia without signing too! but i need to sign it as on some networks hand sets does not. on nokia its ask once and ask everytime for untrusted apps for these items

even the auto start works as long as i set the app access

[tziranda]

Yes, it is a PKCS #7 Certificate Chain (Code Signing Certificate). Try signing your midlet using another tool or an IDE. I'm signing apps using Eclipse Europa and EclipseME.

[tgkprog@gmail.com]

am using the same too downloaded 2 days back
Eclipse Europa and EclipseME

Complete jad
MIDlet-1: PrivateMessage,sms.jpg,tgk.PrvtMsg2
MIDlet-Certificate-1-1: MIIDYDCCAsmgAwIBAgIQANjHEssCXFIU1Wvqyue8xzANBgkqhkiG9w0BAQUFADBVMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEfMB0GA1UEAxMWVGhhd3RlIENvZGUgU2lnbmluZyBDQTAeFw0wNzExMjcwMDAwMDBaFw0wODExMjYyMzU5NTlaMIGsMQswCQYDVQQGEwJJTjESMBAGA1UECBMJS2FybmF0YWthMRIwEAYDVQQHEwlCYW5nYWxvcmUxMDAuBgNVBAoTJ1NyZWUgU2FydmFtYW5nYWxhIERldmVsb3BlciBQcml2YXRlIEx0ZDERMA8GA1UECxMIU29mdHdhcmUxMDAuBgNVBAMTJ1NyZWUgU2FydmFtYW5nYWxhIERldmVsb3BlciBQcml2YXRlIEx0ZDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuNSYA5XBF64g3eTz6SKf8REG+WtjAE39wmzyFW9WX5O9QuGlwoq/ItOlY9cunrGYNXAJhCmxWmf8Dq05HHalQF65pykx2gLLuAK5VJ4aSTZjxzLaBhxhkmGdLqb2AM5u6IoFJV9CN0mHo+2VqiZoT9CrKUy9he9qvKfpLao9wSsCAwEAAaOB2DCB1TAMBgNVHRMBAf8EAjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVDb2RlU2lnbmluZ0NBLmNybDAfBgNVHSUEGDAWBggrBgEFBQcDAwYKKwYBBAGCNwIBFjAdBgNVHQQEFjAUMA4wDAYKKwYBBAGCNwIBFgMCB4AwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMBEGCWCGSAGG+EIBAQQEAwIEEDANBgkqhkiG9w0BAQUFAAOBgQC8QPPBwa5Ro+RUYU8zgGr6O99FuQDwPZKAiGXoTvSOXc3hiPqNfwAXNIkPAxrH9ZP9c7HfeNrFRIOqc/Olw8bn2vttdg489nMmsxPjbB+CI8PE6hVQX11ItthOhJm9wPHJlYMzbtibCIkg25bsYq4ZPgPVxEn2T5g/DCQ5HizRXA==
MIDlet-Certificate-1-2: MIIDTjCCAregAwIBAgIBCjANBgkqhkiG9w0BAQUFADCBzjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEhMB8GA1UEAxMYVGhhd3RlIFByZW1pdW0gU2VydmVyIENBMSgwJgYJKoZIhvcNAQkBFhlwcmVtaXVtLXNlcnZlckB0aGF3dGUuY29tMB4XDTAzMDgwNjAwMDAwMFoXDTEzMDgwNTIzNTk1OVowVTELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xHzAdBgNVBAMTFlRoYXd0ZSBDb2RlIFNpZ25pbmcgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMa4uSdgrwvjkWll236N7ZHmqvG+1e3+bdQsf9Fwd/smmVe03T8wuNwh6miNgZL8LkuRNYQg8tpKurT85tqI8iDFIZIJR5WgCRymeb6xTB388YpuVNJpofFMkzpB/n3UZHtjRfdgYB0xHaTp0w+L+24mJLOo/+XlkNS0wtxQYK5ZAgMBAAGjgbMwgbAwEgYDVR0TAQH/BAgwBgEB/wIBADBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlUHJlbWl1bVNlcnZlckNBLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwMwDgYDVR0PAQH/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwyLTE0NDANBgkqhkiG9w0BAQUFAAOBgQB2spzuE58b9i00kpRFczTcjmsuXPxMfYnrw2jx15kPLh0XyLUWi77NigUG8hlJOgNbBckgjm1S4XaBoMNliiJn5BxTUzdGv7zXL+t7ntAURWxAIQjiXXV2ZjAe9N+Cii+986IMvx3bnxSimnI3TbB3SOhKPwnOVRks7+YHJOGv7A==
MIDlet-Certificate-1-3: MIIDJzCCApCgAwIBAgIBATANBgkqhkiG9w0BAQQFADCBzjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEhMB8GA1UEAxMYVGhhd3RlIFByZW1pdW0gU2VydmVyIENBMSgwJgYJKoZIhvcNAQkBFhlwcmVtaXVtLXNlcnZlckB0aGF3dGUuY29tMB4XDTk2MDgwMTAwMDAwMFoXDTIwMTIzMTIzNTk1OVowgc4xCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEdMBsGA1UEChMUVGhhd3RlIENvbnN1bHRpbmcgY2MxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xITAfBgNVBAMTGFRoYXd0ZSBQcmVtaXVtIFNlcnZlciBDQTEoMCYGCSqGSIb3DQEJARYZcHJlbWl1bS1zZXJ2ZXJAdGhhd3RlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0jY2aovXwlue2oFBYo847kkEVdbQ7xwblRZH7xhINTpS9CtqBo87L+pW46+GjZ4X9560ZXUCTe/LCaIhUdib0GfQug2SBhRz1JPLlyoAnFxODLz6FVL88kRu2hFKbgifLy3j+ao6hnO2RlNYyIkFvYMRuHM/qgeN9EJN50CdHDcCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQQFAAOBgQAmSCwWwlj66BZ0DKqqX1Q/8tfJeGBeXm43YyJ3Nn6yF8Q0ufUIhfzJATj/Tb7yFkJD57taRvvBxhEf8UqwKEbJw8RCfbz6q1lu1bdRiBHjpIUZa4JMpAwSremkrj/xw0llmozFyD4lt5SZu5IycQfwhl7tUCemDaYj+bvLpgcUQg==
MIDlet-Description: PM
MIDlet-Icon: sms.jpg
MIDlet-Info-URL: http://www.t7.x10hosting.com/prjs/pm/
MIDlet-Jar-RSA-SHA1: a91ACJzl745EGq7gJn2fjwGDP6/DORcbYiS9AB6IVp5IsJyWfbOEjuqEPLP+inUhSFQX+orwVWs74mG8Ork1rp2vRIyLkDyXF09POblm0vGdiJWAW6nzScxgebnsIyojP0R1FNuwUhVzAqUcpm8ERzUKyUUQ5cK0/N9Vsyk4rd4=
MIDlet-Jar-Size: 11944
MIDlet-Jar-URL: http://new4tk.googlepages.com/M1.jar
MIDlet-Name: PrivateMessage
MIDlet-Permissions: javax.microedition.io.PushRegistry, javax.microedition.io.Connector.sms, javax.wireless.messaging.sms.receive,javax.wireless.messaging.sms.send,javax.microedition.io.Connector.cbs,javax.wireless.messaging.cbs.receive,javax.microedition.io.Connector.mms,javax.wireless.messaging.mms.receive
MIDlet-Permissions-Opt: javax.wireless.messaging.mms.send
MIDlet-Vendor: Sree Sarvamangala Developer Private Ltd
MIDlet-Version: 1.0.0
MicroEdition-Configuration: CLDC-1.0
MicroEdition-Profile: MIDP-2.0
SMS-Port: 5015

[tziranda]

I tested your permissions on our app and I got the same error (application not supported), can't help you there though.
João

[tgkprog@gmail.com]

ok can u tell me what type of crtificate yours is and if u open jad in notepad do u see

MIDlet-Certificate-1-1: ...
MIDlet-Certificate-1-2: ...
MIDlet-Certificate-1-3: ...


OR ONLY

MIDlet-Certificate-1-1: ...
MIDlet-Certificate-1-2: ...
??

thanks so much for the replies

[tziranda]

I have one of these:

MIDlet-Certificate-1-1:
MIDlet-Certificate-1-2:
MIDlet-Certificate-1-3:

I'm getting some issues with this certificate too, but some really strange ones (see my other post). If you find any solution please post it, thanks.
João

[traud]

tgkprog, I noticed you have a Microsoft code signing cert. Not sure whether that matters. It should not.