Code Signing Certificate expiration after 1 year

[Nikolaos]

Hello,

Lets suppose that i am using Verisign Code Signing Certificate(1 year) to sign my java apps/james and then i upload them to ovi store. My applications are accepted and they go live. After one year the certificate "expires" and my applications are no longer considered "Trusted". What happens then? Do Nokia OVI store automatically makes them No available? Is there a solution for that?


Thanks

Nik

[Utumno]

When you submit, you have to give them 'end of distribution' date, which must be no later than the date when your cert expires. I assume after the 'end of distribution' date, the content will be automatically taken off the store.

[Nikolaos]

Utumno,

Thanks! Clean and Easy. That is what i needed!

Nikos.

[biskero]

Ciao,

just to continue the discussion.
I used the trustcenter to sign sis files.
Now, I just received an email from them for getting a new certificate (they do not do renewal).

So, couple of questions.
1 - will the symbian singed sis work after the certificate is exapired? User will just get "untrusted" message when installing? The exparation for the certificate is 10 years, so my guess is no until 10 expires.
2 - anyone knows a certificate that is multi-year valid to do symbian signed? I do not want to request one every year.

Alessandro

[Pepper_91]

I have another question

I have developed a Java ME app. I'm thinking of buy a Thawte certificate, because Java Verified is a nightmare and Verisign doesn't work with Nokia S40 5th edition.

Thawte certificate cost about 300$/year. If I sign today an App. with a Thawte certificate that expires after one year, and if I install the App. today: What will happend one year in the future when I will run my application?

Thank you!

[shaii]

the time frame of 1 year relates to the time which you can install the app with that certificate, but once it is installed it will work for ever.

[Pepper_91]

the time frame of 1 year relates to the time which you can install the app with that certificate, but once it is installed it will work for ever.

Thank you very much!!!

Do you recommend the certificate from Thawte? I think that is the cheapest and easiest way to publish on Ovi.

Verisign is very expensive and doen's works with Nokia S40 5º Ed, and Java Verified Program is the hell!

[shaii]

Thawte also doesnt work on all handsets
search the forum and nokia wiki on certificates for details

[OviPen]

Thank you very much!!!

Do you recommend the certificate from Thawte? I think that is the cheapest and easiest way to publish on Ovi.

Verisign is very expensive and doen's works with Nokia S40 5º Ed, and Java Verified Program is the hell!

Dear Pepper_91,

There are different types of certificates you can choose from.

Java verified certificate is valid for the longest time.
Verisign certificate does not work in S40 5th edition and 5th edition FP1.
Thawte certificate does not work in 5320 and 6210. For more information, please refer to http://javaverified.com/.

There is only 1 type of certificate for symbian signed. For more information, please refer to https://www.symbiansigned.com/app/page.

If you have any questions, please contact us at publishtoovi.support@nokia.com

Thank you.

[elkaragy]

Hi Shaii,

I just made a long chat with thawte technical support. I asked them whether the downloaded apps will still work as trusted or the privileged functions will stop.

Unfortunately he said the the privileged functions will stop ! and you must resign the app and redistribute !!

I personally think your opinion is more logical, did you personally pass a similar experience ??
I hope the tech support member with whom I talked was out of correctness.

[shaii]

Hi,
i am 100% sure of what i wrote.
any j2me app that was installed with a 3rd party certificate that was valid during the installation will remain in the 3rd party trusted domain indefinitely (with the permission you have configured in the jad).
once the certificate expires u should get a new certificate and re-sign the app for future releases & installation but it wont affect any app that was already installed with the old certificate.