JAR and JAD problems - GSM-Forum

segfault · 10-27-2013, 12:22

I'm working on making a mode for Nokia 208 RM-948 / RM-957 (S40 Asaha, I think).
I'm trying to add new application to the predefcollections folder.
I have a JAR and I'm quite sure it match this S40 phone.
I've created a JAD file and set a link to it in the menusettings.xml.
When I'm trying to lunch my app I get:
"Invalid application. Delete?"
message.
I don't have a signature in the JAD, because I don't have a valid certificate from Nokia. But I saw that apps such as wocl.jar and conv.jar in that folder are not signed and they still works fine. On the other hand these two don't need many permissions.
I see that most apps are signed by one of the followings:
* Nokia Online CA
* Nokia Online Certification Authority II
* Nokia Online CA I
I've tried to remove the signature from one of the signed apps to see what happens, and I got the same "Invalid application. Delete?" message.
I could not find any of these public certificates anywhere on the FAT16.

I guess that my questions are:
1. Where the above certificates are stored at?
2. Is the certificate really what makes the app not starting?
3. How do I get my app signed without paying lots of money to Nokia?
4. Are there any other certificates that are able to sign code?
5. How does the phone decides if the app needs to be signed or not?
6. I was not able to run any version of BlueFTP on the phone, is there any version signed with proper Nokia certificate of that app?

segfault · 10-27-2013, 16:18

I have some answers to my own questions.
I found this MIDP 2.0: Signed MIDlet Developer's Guide v2.0
PDF by Nokia, that answers some.
1. I still don't know.
2. Yes
3. According to the PDF, any certificate that I install on the device and shown in the certificates list should be able to sign MIDlets
4. I still don't know.
5. That is done according to the META-INF/MANIFEST.MF inside the jar file.
6. I still don't know.

Please can anyone help me with the questions above?
Is there another way to read the content of the phone beside apps such as BlueFTP?

10-27-2013, 12:22	#1 (permalink)
segfault Junior Member Join Date: Sep 2010 Location: USA Posts: 37 Member: 1401040 Status: Offline Sonork: 100.1643989 Thanks Meter: 6	JAR and JAD problems I'm working on making a mode for Nokia 208 RM-948 / RM-957 (S40 Asaha, I think). I'm trying to add new application to the predefcollections folder. I have a JAR and I'm quite sure it match this S40 phone. I've created a JAD file and set a link to it in the menusettings.xml. When I'm trying to lunch my app I get: "Invalid application. Delete?" message. I don't have a signature in the JAD, because I don't have a valid certificate from Nokia. But I saw that apps such as wocl.jar and conv.jar in that folder are not signed and they still works fine. On the other hand these two don't need many permissions. I see that most apps are signed by one of the followings: * Nokia Online CA * Nokia Online Certification Authority II * Nokia Online CA I I've tried to remove the signature from one of the signed apps to see what happens, and I got the same "Invalid application. Delete?" message. I could not find any of these public certificates anywhere on the FAT16. I guess that my questions are: 1. Where the above certificates are stored at? 2. Is the certificate really what makes the app not starting? 3. How do I get my app signed without paying lots of money to Nokia? 4. Are there any other certificates that are able to sign code? 5. How does the phone decides if the app needs to be signed or not? 6. I was not able to run any version of BlueFTP on the phone, is there any version signed with proper Nokia certificate of that app?

10-27-2013, 16:18	#2 (permalink)
segfault Junior Member Join Date: Sep 2010 Location: USA Posts: 37 Member: 1401040 Status: Offline Sonork: 100.1643989 Thanks Meter: 6	I have some answers to my own questions. I found this MIDP 2.0: Signed MIDlet Developer's Guide v2.0 PDF by Nokia, that answers some. 1. I still don't know. 2. Yes 3. According to the PDF, any certificate that I install on the device and shown in the certificates list should be able to sign MIDlets 4. I still don't know. 5. That is done according to the META-INF/MANIFEST.MF inside the jar file. 6. I still don't know. Please can anyone help me with the questions above? Is there another way to read the content of the phone beside apps such as BlueFTP?