Midlet signing

[bhakki]

Hi,

I want to signing the midlet.
Which one is the best of these providers Thawte, VeriSign and Java Verified?

And i have some doubt.
If i signed the jar, Is this signed jar will support for all mobiles?
And Is that certificate will support for all mobiles like s40,s60, LG, samsung and etc?

[ektasrv]

I feel Java Verified (1st choice) will be available&supported on most of the devices but even VeriSign(2nd) and Thawte(3rd) is also very popular.

[bhakki]

Thanks ekta.
Is that cerificates will differ for device to device?
Is it possible to signing the multiple application with single signing process?

[raj_J2ME]

Hi,
1.Which one is the best of these providers Thawte, VeriSign and Java Verified?

2.If i signed the jar, Is this signed jar will support for all mobiles?

3.And Is that certificate will support for all mobiles like s40,s60, LG, samsung and etc?

1.You can choose either of these. however you should go for the Verisign since that the certification used much as compare to any other one.
2.Yeah, 99%
3.Well this is the same as the second point and hence yeah, this will work on most of the devices vendors.

[bhakki]

thanks raj.
Is it possible to use one signed certificates to all other applications?

[raj_J2ME]

thanks raj.
Is it possible to use one signed certificates to all other applications?

Yeah, that's correct and you can use that certificate for the provided time period.

[im2amit]

You might face some problems with Verisign certificates while working with PIM on motorola devices which require their own certificate, the best option will be to go for signing based on the trageted devices, as you go porting your application from one device OEM to another, also check which certificates works on most of them.
Java verified is having very good support please see the list of devices here - http://javaverified.com/device_matrix

[bhakki]

Ok. thanks amit.
I need to singing the midlet at least 2 to 3 years.
Is it possilble in javaverified?
Is it possible to use that signed certificate to all other differ differ applications?

[im2amit]

Ok. thanks amit.
I need to singing the midlet at least 2 to 3 years.
Is it possilble in javaverified?
Is it possible to use that signed certificate to all other differ differ applications?

For such conditions try Verisign only.... as with Java Verified you will need to send all your apps for testing to Java Verified Test Agency - and then only the app will be signed. See (http://javaverified.com/Getting_Your_App_Java_Verified)

[bhakki]

But mainly i signing the midlet for using JSR 75.
you said already some problem for using verisign.
Can you tell me how is Thawte?

[ektasrv]

I need to singing the midlet at least 2 to 3 years Is it possilble in javaverified?

Java Verified certificate is a one time cost no need of annual renewal like verisign.

Is it possible to use that signed certificate to all other differ differ applications?

You cannot sign different app with JV certificate yourself.

[ektasrv]

But mainly i signing the midlet for using JSR 75.
you said already some problem for using verisign.
Can you tell me how is Thawte?

Please elaborate the Issue that you are facing with Verisign using JSR-75, it would be almost the same with Thawte as its support is even lower then Verisign.
For devices from OEM's like Motorola or RIM Blackberry you have to use OEM specific certificate only, which are quite cheaper cost wise as compared to Verisign. RIM $20 per year, Motocoder around $100 pa unlimited signing.

[grahamhughes]

Which one is the best of these providers Thawte, VeriSign and Java Verified?

That is hard to say. It depends on your exact requirements.

If i signed the jar, Is this signed jar will support for all mobiles?
And Is that certificate will support for all mobiles like s40,s60, LG, samsung and etc?

No. There is no certificate that will support 100% of handsets. You need to know your target market before choosing.

Is that cerificates will differ for device to device?

Is it guaranteed. It will differ between manufacturers, between models, and between different handsets of the same model, depending on operator branding.

Is it possible to signing the multiple application with single signing process?

With Thawte or Verisign, yes. With Java Verified, no.

I need to singing the midlet at least 2 to 3 years.
Is it possilble in javaverified?

A Java Verified signed application is valid for ten years (from the time the application is signed).

Thawte or Verisign certificates are usually valid for at least two years (from the time you buy the certificate), but it is possible to buy longer certificates (it will cost more).

But mainly i signing the midlet for using JSR 75.

Be sure you know what signing will and will not achieve. It will not remove all security restrictions.

Start by reading this. Read everything you can find. Don't waste your money on a certificate that will not achieve what you want.

Graham.

[bhakki]

If im adding the 500 contacts to mobile using PIM, Every time confirm alert says yes/no.
If yes means no problem contact was saved, but If i choose no means i got security exception.
Thats y i going to signing a midlet.
Is this problem will solved for after signing the midlet?

[grahamhughes]

It depends on the device. It might make no difference, although it will probably activate the option to "always allow" or "ask first time only". Check the documentation in the wiki for how different devices provide authorization to trusted and untrusted applications.

Graham.