Link to home
Start Free TrialLog in
Avatar of Explorer060599
Explorer060599

asked on

error "certificate error. contact the application supplier"

hi experts,

l've written a midlet that uses Location, Internet and PushRegistry function on the phone nokia 6110 Navigator. i self-signed the midlet then install without error on the nokia 6680, but i got error "Certificate error, contact the application supplier" when try install into nokia 6110 Navigator.
for your information, l'm using Netbean IDE for signing and the settings of th phone under Application Manager has set to allow Software Installation to "All" and Online Cert Checking to "Off".
from my research on internet, some people said nokia 60 3rd edition cannot install self-signed application but on another side, symbian http://www.symbiansigned.com/ provide certficate to sis developer for testing on the phone. why not java Midlet? or i've missed up anything?

please help.

many thanks.

regards
eddie
Avatar of keyurkarnik
keyurkarnik

you should first try to install the self signed certificate on your mobile. This would be somethere in Security > Certificates..

Once the certificate is installed (you will have to transfer it using bluetooth or cable and then install it), you need to give rights to the certificate, then the midlet will work.
It is similar to the issue you faced earlier, look at the same solution I gave you earlier

https://www.experts-exchange.com/questions/22919543/Midlet-signing-for-testing.html
For the 6110, you will find it under Settings _> Phone Settings -> General -> Security -> Certificate management

Your added certifcate will be seen under Personal Certificates.

You just need to make sure that you send your certificate across to your phone via PC Suite (cvable or wireless) or just via file transfer. Make sure that the file has the correct extension.
Avatar of Explorer060599

ASKER

hi keyurkarnik,

my certificate file extension is *.crt. and have added the certificate into the phone before install the midlet, 6680 and 6110. The certificate seems installed under "authority" not "personal". isn't this the problem? what should i do to make it installed under "personal"?

appreciate your help. many thanks.
theres no issue whether it is installed under personal or authority.
if the certificate has been installed on your phone, you just need to select the certificate and give it the required level of Trust in the Trust settings - thats all.

(In case you need to install the cert into the Personal certs, there should be an option during installationa s to where you want to install it, or post installation check whether you can move it - in the options you get after selecting the cert)

Once the necessary trust settings have been done for your application, your midlet should install and work!!
hi keyurkarnik,

under the Trust Settings, i've set the "Online certificate check" to "No" and "Internet" to "Yes", but i still get the same error.
Are you sure that the certificate you have installed and the certificate you have signed with are one and the same.
Alos, try using the SUN WTK to sign the midlet.
hi keyurkarnik,

l'm sure the same, otherwise it wont work on another phone nokia 6680, and has tried follow the steps using  jarsigner and JadTool.jar as shown at http://www.spindriftpages.net/blog/dave/2006/06/18/midlet-jar-signing-a-tutorial-revised/, but the result still the same. one thing i noticed about the different of certificate trust setting between nokia 6610 navigator and 6680 as shown below, the 6110 does not have the setting "App. Installation" and "Symbian Installation" even both phones are using the same certificate. will this the problem caused?

Nokia 6110  Navigator
--------------------------
Internet
Online Certif. check

Nokia 6680
--------------------------
Internet
Online Certif. check
Symbian Installation
App. Installation
That could be a problem. If it is not giving you an option for installation for self signed certificates,you will need a trusted certificate.

Do one thing - check if any of the other certificates like Verisign or Geo trust or others have the installation option.

If they do have, then you will not be able to use self signed certifs, otherwise we willl have to delve further
verisign dont have,MIDP2 GeoTrust got. mean i have to give up for phone 6110 caused i just updated the phone's firmware not so long, and according to the articles saying that the self-signed is not supported anymore on s60 3rd edition nokia phone. the below is Trust Domains found in the link you mentioned in my previous post, from here i can see that the Network Access dont have "Always Allowed" option even with signed certificate. does this meant proper signed MIDLET application also must request internet permission from user the first time?

Trust Domains
-----------------
Network Access: Not Allowed, Ask every time, Ask first time
Messaging: Not Allowed, Ask every time App
Auto-Start: Not Allowed, Ask every time, Ask first time
Connectivity: Not Allowed, Ask every time, Ask first time, Always allowed
Multimedia: Not Allowed, Ask every time, Ask first time
Read User Data: Not Allowed, Ask every time, Ask first time, Always allowed
Edit User Data: Not Allowed, Ask every time, Ask first time, Always allowed

my midlet application uses Location, Internet and PushRegistry. are these still required user permission once its signed properly?
if it is signed using a certificates which is authorised by a valid CA like GeoTrust or any other certified authority, you will have to set the permissions only for the first time. This is the way it usually happens.
You can try another tweak - at the cost of loss of functionality - use MIDP 1.0. It doesnt support certificates and stuff, so an unsigned midlet might just work fine.

By the wa, have you tried using unsigned midlets - usually they end up working fine without any certificates.
still ask for the first time even signed with valid CA? this is big problem for me, my midlet intends to launch automatically and run in the background using pushregistry and send GPS information to server via internet. if you are sure that permission would be still required the 1st time from user even signed with valid CA, then means i have to abandon this project. unsigned midlet? yes, i've tried before and works fined on both phone, but keep prompting for the permission to access internet,location and pushregistry. do you know any others way to stop the prompt?Not even once.
ASKER CERTIFIED SOLUTION
Avatar of keyurkarnik
keyurkarnik

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial