Certificate store - HOWTO ?

[browndrf]

How do I access the certificates present in a handset from a midlet ?
I don't really want to load the cert into objects, just reading data would be enough.
(not using SATSA - if that supports)

thanks
~b

[juarezjunior]

Hi ~b,

"How do I access the certificates present in a handset from a midlet ?"

AFAIK there's no way for MIDlets.

BR,

Juarez Jr

[browndrf]

thank u juarezjunior, thats interestingly sad.

I'm still curious.
* Then hows does https connections work ? May be they are just generating a keypair and not authenticating the server ?

* What is the significance of the "Certificate" interface available in j2me SDK ?

thanks
~b

[peterblazejewicz]

hi ~b,

and question is "how do you obtain reference to Certificate/SecurityInfo?" the answer is from GCF implementations like HttpsConnectionor SecureSocket,
its read only information about current connection security layer information according from what i know from docs, everythings happens behind-a-scene in microedition java, we just use ssl or https,

regards,
Peter

[browndrf]

Peter,
I was thinking more from an authentication point of view. Suppose if I want to use 3rd party packages like bouncy castle to do TLS, I need a cert store to authenticate servers. Well, it looks like its under the hood and the hood will remain closed for the time being..

thanks anyway..
~b

[peterblazejewicz]

hi,

yes, but that is how it works,

In general, HTTPS is a seamless solution for developers and users. It does require that browsers or MIDP implementations include root certificates for commonly used certificate authorities. When a server presents a certificate or certificate chain, the device implementation must possess the root certificate so that it can verify the server's certificate.

that from article already mentioned in other thread about using crypt libs like BouncyCastle
http://developers.sun.com/techtopics...les/security3/
that library can be used to read cert shipped within .jar - that is not in-device root certs which are not available for midlet - I'm guessing JSR-75 won't allow to read that system folder,

hth,
regards,
Peter