Signed jar -> invalid application

[fgi]

Hi there!

I have written a mobile application in java. It uses file-operations, so i had to sign it with a certificate (to do not disturb the user with security messages). The application works fine without signing, but the signed jar says "Invalid application" when i run it.

I have bought a certificate from thawte, so it have to be good (and i got help from online chat support to install it, so it is good). The mobile (Nokia 3110 Classic) includes the thawte root-certificate.

Can anyone tell me what is the problem?

[balagopalks]

Hi fgi! Welcome to Nokia Developer Discusssion Boards!!

How are you installing the MIDlet to the device? Over the Air or with Local Connectivity/Nokia PC Suite.

Regards
Gopal

[fgi]

I have sent it directly by Bluetooth, and with Nokia PC Suite (Bluetooth connect)

[hnipak]

Did you put all three certificates (yours, Thawte Code Signing CA and Thawte Premium Server CA) to the JAD?

[fgi]

I add to my application only the certificate that i get back from thawte, like:
jarsigner -keystore [place of keystore] [place of jar file] [alias]

[hnipak]

I do not think that is enough - the intermediate CA cert is missing in the certification path.

And my experience is that root CA should be present in the JAD too, on some devices it is ok to omit it, but others will no accept such application as valid.
I do not remember concrete brand/models by heart, sorry, it just appears it is safer to put the root CA cert into JAD too.

[traud]

Please have a look at these instructions which include a lot of links and solutions for common pitfalls.

[fgi]

I do not think that is enough - the intermediate CA cert is missing in the certification path.

And my experience is that root CA should be present in the JAD too, on some devices it is ok to omit it, but others will no accept such application as valid.
I do not remember concrete brand/models by heart, sorry, it just appears it is safer to put the root CA cert into JAD too.

So i have to add the root-certificate of the thawte to my keystore? And then i have to sign my .jad file with it?
Can you write me the correct commands?

[fgi]

Please have a look at these instructions which include a lot of links and solutions for common pitfalls.

First:
The Manual says: The signing procedure can be done using the Carbide.j tool at http://www.forum.nokia.com/main/
resources/tools_and_sdks/carbide/index.html or command line utilities. Both procedures are explained
below.

Second:
And the followed link says: Forum Nokia has withdrawn Carbide.j because of the increasing availability of suitable open-source and free tools for mobile Java developers.

Third:
I use NetBeans and i can't find the Permissions tab.

Can anyone help me?

[fgi]

Working...

NetBeans has done it well:
http://developers.sun.com/mobility/r...-security.html