Nokia N8 and SSL problem

[bjorn911]

We have an JavaME application using SSL (SecureConnection) to communicate with a server on port 4421. The server is using a Thawte Server CA certificate.

This has worked on every phone before supporting JavaME MIDP 2.0. For example Nokia S40, S60 2nd ed, S60 3rd ed, S60 5th ed etc.

On Nokia N8 it gets:
javax.microedition.pki.CertificateException
Untrusted server certificate

The phone has the certificate in its list, if it connects with HTTPS instead of SSL the N8 can establish a connection to the server.

There seem to be a bug in the Nokia N8 JavaME implementation of SSL. For SSL it can't access the phones root-certificates from JavaME, but it can for HTTPS even though it should be the same handling of certificates.

Has anybody else been able to use SSL from JavaME in the Nokia N8? Or is there any JavaME applictions out there using SSL and is working?

[bjorn911]

I don't expect that this issue should have been solved by a user here on Forum Nokia. But I would be very happy if Nokia could confirm that it is a bug or not and not being completely silent, specially when it regards their flagship model!

This may seem as a small issue, but it isn't! People call and email us about this every day, they are very disappointed when they buy a phone that's supposed to be top of the line and can't handle basic things that €50 phones handle.

Should one of Sweden's largest companies go out and tell it's customers to avoid the Nokia N8 and those who already bought it hand it back since it doesn't meet its specification (MIDP 2.0)?

We have sent in a bug report, posted here and in the Series 40 & S60 Platform Feedback but no response at all.

Does anybody know of a JavaME application using SSL that we can use to try to verify the bug or have any other suggestion of what to do?

[traud]

Same here with my own MIDlet and mujMail. The ‘easiest’ way is to avoid the internal implementation and use Bounce Castle Lightweight API. See the source code of mujMail for an example. Anyway, please, let us continue in your other thread …