When I connect to a site using SSL/TLS, a certificate warning dialog pops up。

[chengguangguo]

The following is details:

The version of the OS is symbian7.0.

The application is the example of symbian's HelloWorld(I don't know that whether it has been signed or not).Its path is \Symbian\UIQ_21\examples\ToolsAndUtilities\Install.

In this folder,I can find HelloWorldSecure.pkg file.

Then ExamplesReadMe.txt said that this .pkg(HelloWorldSecure.pkg) file demonstrates the use of a package signature for secure installation. A key and certificate must be generated before creation of the .sis file using the Certification Generator.

Of course,I can find helloworld.cer and HelloWorld.key in this folder.So in MS-Dos window,type the following command:

C:\Symbian\UIQ_21\examples\ToolsAndUtilities\Install>makesis HelloWorldSecure.pkg

A few seconds later,HelloWorldSecure.sis has been generated .Install the HelloWorldSecure.sis,the Symbian OS Installation System
gives the message:Component failed security check.Cannot install.

could you please tell me,why is it and how I can do?

[Jason Glass]

Maybe Nokias code signing certificate is not on there?

or, to sign sis files, dont you have to post your IMEI or configure it to allow sis code signing using symbian.com website, it has been awhile

[Jason Glass]

and i am confused, as the subject of your post, does not match your posted question

[chengguangguo]

and i am confused, as the subject of your post, does not match your posted question

I'm sorry,When I connect to a site using SSL/TLS, a certificate warning dialog pops up.I just wanna disable the popup security information.and I wanna to ask that how to install digital certificate in symbian os's control panel?

[Jason Glass]

the pop up warning, ussually only occurs, if there is something wrong with the three items on the certificate, name, date, or CA

are you talking about going through the browser, and accessing a SSL site on a nokia device? cus you shouldnt get a pop up on java, java will just throw exception if anything doesnt match

I have heard of people downloading certificates from the web, but your web server must support the mime type as well as the browser. have also heard of bluetoothing them to device, and trying to install, I manually copied them into file system, and device had (excuse french) no hella of an idea what they were

The device also must not have the certificates locked in, i.e. it wont let you install any if it is

For java, or the browser, it appears they use the same, or a related keystore, in the browser options, or advanced options, you might find a security or certifcates menu item, else, it might be in device settings, under security


Still a little confused, cus before you spoke of signing a C++ app, now your talking of the signing certificate used for websites, which is different, and then there is signing of a java midlet

all are related to CA certificates

[traud]

Folks, do not confuse code signing with online certificates.

chengguangguo, you want to have a internet certificate. I recommend to install the correct one on your server. No warning will appear. If you work with a non-standard certificate, you can imports its CA via the internal browser easily. However, if you want to bundle your online certificate with your SIS, I have no glue if this is possible at all.

Jason Glass, we are in the Symbian C++ section here.

[Jason Glass]

Traud,

I realised the C++ section, but the questions were confusing.

You said easily install a certificate through web browser, I have not had much luck with it. This was on several devices.

And the server had correct mime types, as well as device could accept correct mime types, but still did not work.

Are not the CA certs and root store locked on some devices, meaning they will not let you install new ones?

[traud]

I have been able to install a CA (root) certificate on all Nokia devices I have here. There are some rules:
– Nokia Series 60 loves X.509 in DER format with application/x-x509-ca-cert MIME media type.
– Nokia Series 40 loves WPKI with application/vnd.wap.hashed-certificate.
– If all of these fail (pre-2nd Edition), you have to use the good old WTLS with application/vnd.wap.wtls-ca-certificate.

Remember, it is not just the MIME media type. The content must fit its specifications (DER, WPKI, WTLS). Additionally make sure to use CA/root certificates only. I have not tried user or intermediate ones, yet. Nokia has a document in Forum Nokia which device supports which MIME media type, however, the list is buggy and unclear a bit when it comes to certificates. Use the above as good guideline and play a bit.

Your Nokia 6101 needs WPKI – I would guess from my list. There are (commercial) tools to convert a normal X.509 to WPKI.

[Jason Glass]

sweet traud, thanks for all the info, so maybe even though I had the correct mime types, as I tried several, the content might not have been correct.

Unfortunately, we returned the 6101. Do you have one, not for my use, was just wondering, if yours exhibited same tmobile cingular behaviour, i.e. not being able to change app access for midlet accessing web, until that is, if you managed to install a signed app on it.

sincerely,

[kalyanich]

Hi ,
I am develooping application on S60 v7.0s which is a client-server module i.e mobile client communicating with server system.
For security of user details i want to implement SSL for communication b/w mobile and server system.
So how should i implement it so that data is transferd securely and client server communication goes on smoothly.
Are Certificates generated using Certificate Generator any way concenered with Security implementation.

Please do help me .

Thanks in advance.

[Jason Glass]

I havent looked at SSL on the C++ side, just on the Java side, sorry cant help you much there, you might look around in this forum, the other c++ forums, or NewLC's forum.

I think, the certificate generator, only deals with generating a certificate for signing your C++ app, dont believe it has anyhting to do with SSL, though again, it has been awhile.

Good luck,