- html - 出于某种原因,IE8 对我的 Sass 文件中继承的 html5 CSS 不友好?
- JMeter 在响应断言中使用 span 标签的问题
- html - 在 :hover and :active? 上具有不同效果的 CSS 动画
- html - 相对于居中的 html 内容固定的 CSS 重复背景?
一个简单的问题,一个相当复杂的答案:
如何对 Java Midlet 进行签名,以便将其加载到安全提示较少的手机上?
最佳答案
获取所需的软件
导入现有证书(如果有)
keytool -import -alias {myalias} -file {mycertificate}
(由于没有适当的证书,我无法对此进行测试)keytool -list
查看您的新证书keytool -export -alias {myalias} -file mycertificate.crt
创建并导入新的(测试)证书
keytool -genkey -alias {myalias} -keyalg RSA -validity 365
keytool -list
查看您的新证书keytool -export -alias {myalias} -file mycertificate.crt
C:\j2sdk1.4.2_08\bin>keytool -genkey -alias company -keyalg RSA -validity 365
Enter keystore password: password
What is your first and last name? [Unknown]: My Name
What is the name of your organizational unit? [Unknown]: company
What is the name of your organization? [Unknown]: company
What is the name of your City or Locality? [Unknown]: location
What is the name of your State or Province? [Unknown]: location2
What is the two-letter country code for this unit? [Unknown]: GB
Is CN=My Name, OU=company, O=company, L=location, ST=location2, C=GB correct? [no]: yes
Enter key password for (RETURN if same as keystore password):
构建并打包应用程序
javac
构建 MIDlet 时要特别注意类路径和 bootclasspath 选项(否则预验证将失败)。我还将目标设置为 1.1,源设置为 1.3MIDlet-Jar-URL
<li>Both these tasks can be completed using the wtkJad Antenna task</li>
<li>Package and preverify the app using the wtkPackage Antenna Task you must set the classpath and bootclasspath properties correctly otherwise Preverification will fail</li>
<p><strong>Sign the application</strong></p>
<ol>
<li>Sign the Application using <a href="http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/jarsigner.html" rel="noreferrer noopener nofollow"><code>jarsigner</code></a></li>
<li>Run <code>jarsigner -keystore {mykeystore} -storepass (mypassword} {myjar} {myalias}</code></li>
<li>Now you have a signed jar you need to update the <code>MIDlet-Jar-Size</code> in your JAD</li>
<li>Now add the certificate to the JAD using <a href="http://java.sun.com/j2me/docs/wtk2.2/docs/UserGuide-html/commandline.html" rel="noreferrer noopener nofollow"><code>JadTool.jar</code></a> from the WTK</li>
<li>Run <code>java -jar JadTool.jar -addcert -alias {myalias} -storepass {mypassword} -keystore {mykeystore} -inputjad {myinputjad} -outputjad {myoutputjad}</code></li>
<li>Now add the signature to the JAD again using <a href="http://java.sun.com/j2me/docs/wtk2.2/docs/UserGuide-html/commandline.html" rel="noreferrer noopener nofollow"><code>JadTool.jar</code></a></li>
<li>Run <code>java -jar JadTool.jar -addjarsig -alias {myalias} -jarfile {myjar} -storepass {mypassword} -keypass {mypassword} -keystore {mykeystore} -inputjad {myinputjad} -outputjad {myoutputjad}</code></li>
</ol>
<p><strong>Deployment</strong></p>
<ol>
<li>Deploy this to a web server with the MIME types set correctly and download it to your phone and it will be a trusted 3rd party application</li>
<li>You can also deploy applications to phones by sending the JAR & JAD to the phone over Bluetooth or Infrared or a cable depending on your phones features. On Nokia phones the files
appear in your SMS Inbox</li>
</ol>
<p><strong>Installing the Certificate on the phone</strong></p>
<ol>
<li>Import the certificate into your phone, in Windows XP SP2 I could do
this by right clicking the file and selecting "Send to Bluetooth Device",
you should be able to send files by cable or Infra Red (IR) too. NB: I
haven't found anyway of importing a certificate on a Series 40 phone</li>
<li>Once the certificate is installed it needs to be authorised for
"Application Installation". On my phone (Nokia 6680) this is under
Tools->Settings->Certificate Management->Trust Settings, I turned on
everything but I think "Application Installation" is all you need</li>
</ol>
<p><strong>Common Problems</strong></p>
<ol>
<li>Application not installed using the JAD: The application is only trusted if it is installed using the JAD, the application will still install from the jar but it won't be trusted.</li>
<li>Application trust settings not set: Once your application is installed you need to specify how much trust to give it (it doesn't get all permissions by default). On a Nokia Series 60 phone these are found under the App. Manager.</li>
<li>Root certificate missing from phone: The Java Verified certificate and/or Verisign certificates are missing from some phones check under Tools->Settings->Certificate Management for the relevant certificate</li>
<li>Authorization Failed: - There are a whole host of possible reasons behind this here are the ones I've come across
<ol>
<li>Certificate missing from phone, double check your certificate is installed and has been marked as trusted for application installs in Certificate Management</li>
<li>Reboot: Uninstall the application completely then reboot your phone try taking the battery and SIM out too, often things get themselves in a twist, especially if you've been re-installing a lot without uninstalling first</li>
<li>JAD/JAR mismatch: Double check the application size in the JAD, remember it's the number of bytes that is important NOT the size on disk</li>
<li>Browser cache: If you're installing over the air make sure you clear your browser cache before installing</li>
<li>I've heard but not verified that line breaks in the <code>MIDlet-Permissions</code> can cause problems but it seems ok to me on Nokia 6680/6630/6230i (could be firmware dependent?)</li>
<li>The <code>MIDlet-Permissions</code> attribute is the cause of a lot of problems (especially since the documentation is often wrong/missing or different depending on the phone), try leaving it out first and add permissions in one at a time. Some phones will complain about permissions they don't support, some will ignore them</li>
</ol>
</li>
<li>There is a bug in some early Nokia 6600 firmwares that stop the install of trusted MIDlets</li>
<li>Certificate not valid yet: If you generated the certificate yourself it may have a start validity date of tomorrow, also if your PC and phone dates are different you may be outside the period of validity of the certificate</li>
<li>No certificate management on Series 40 phones, you can install a signed application but behavior is strange with self signed certificates</li>
<li>JadTool problems: I haven't experienced any of these issues but lots of other people have
<ol>
<li>"I have issues if I try to use the jadtool manually. I have a certificate chain and can't seem to get the second certificate added to the JAD file using any WTK jadtool. The interesting part however is that I can successfully sign the midlet using any of the same WTK GUI interfaces - they add the second certificate correctly. My steps:
<ol>
<li>Use 1.4.2_06 jarsigner.exe to sign jar</li>
<li>Use WTK (2.2 or 2.3 beta) jadtool to addcert with certnum 1</li>
<li>If I call jadtool to addcert with certnum 2 the same certificate is inserted as cert 1-2 I'm assuming I am doing something incorrectly since the WTK gui seems to be working just fine"</li>
</ol>
</li>
<li>"I received a post on the KVM news group on the topic that states there is a bug in the jadtool and the author claims to have filed a bug report and posted a patch: <a href="http://archives.java.sun.com/cgi-bin/wa?A2=ind0508&L=kvm-interest&F=&S=&P=9858" rel="noreferrer noopener nofollow">http://archives.java.sun.com/cgi-bin/wa?A2=ind0508&L=kvm-interest&F=&S=&P=9858</a> One interesting note that was also posted was that the cert JAD params are static so once you get them from the WTK correctly you can put them statically in the ant script."</li>
<li>"I am trying to sign a MIdlet for Nokia 6620 device. I am using a Verisign Code Signing certificate that actually contains two certificates (User and Intermediate CA). I am using the WTK 2.2 signing tool. Do you know if this tool support two certificates when signing ? The signature is added to the JAD file with two certificates but I have been getting security error when installing. I have checked on the device and there are different root certificates installed for Verisign but it still fails !</li>
<li>"If you want, you can download the sprintpcs developer kit as it supports dual certs (<a href="http://developer.sprintpcs.com" rel="noreferrer noopener nofollow">http://developer.sprintpcs.com</a>). However, I never got that cert to work on the Nokia (6620/cingular) phone, although it does work on sprint phones (with developer root enabled). Ultimately, I only got things to work by creating the cert as described in this blog and installing that on the phone. Bizarrely, even though the root cert for my versign-signed cert *was* on the 6620 phone, it still would never install my MIDlet as you would think it should."</li>
</ol>
</li>
<li>Old phones (6230/i, 6682) don't support x509 certificates, WPKI has been suggested as a possible solution but I haven't investigated this</li>
<li>Socket connections can be problematic (<a href="http://discussion.forum.nokia.com/forum/showthread.php?t=68306%20" rel="noreferrer noopener nofollow">http://discussion.forum.nokia.com/forum/showthread.php?t=68306 </a>) possibly due to the WAP infrastructure and the services provided by an operator. HTTP is a much safer protocol to use</li>
<li>"Go online and check application validity": Yes/No. If I click on yes button the phone I get the following error: "Certificate revoked for this application" and the installation fails. To rectify this go to Tools -> Manager -> Menu -> Settings -> Online Certif Check [ On / Off / Required] There is also a Default address setting. If the online control setting is required, the check will fail, if there is no default address. see <a href="http://discussion.forum.nokia.com/forum/showthread.php?t=71071" rel="noreferrer noopener nofollow">http://discussion.forum.nokia.com/forum/showthread.php?t=71071</a></li>
</ol>
<p><strong>Trust Domains</strong></p>
<ol>
<li>There are 4 different trust domains in MIDP2 (manufacturer, operator, trusted third party, and untrusted). Trusted Third Party is the only one of any use to us really.It gives the following options on my Nokia 6680 (Vodafone UK):</li>
Network Access: Not Allowed, Ask every time, Ask first time
Messaging: Not Allowed, Ask every time App
Auto-Start: Not Allowed, Ask every time, Ask first time
Connectivity: Not Allowed, Ask every time, Ask first time, Always allowed
Multimedia: Not Allowed, Ask every time, Ask first time
Read User Data: Not Allowed, Ask every time, Ask first time, Always allowed
Edit User Data: Not Allowed, Ask every time, Ask first time, Always allowed
<li>These settings are defined by the operator and the phone manufacturer and therefore vary between phone, manufacturer and operator.</li>
</ol>
<p><strong>Unresolved Problems</strong></p>
<ol>
<li>I managed to sign the JAD with this format using J2ME WTK utilities, but when trying to install it on the device I get a message "Application authentication failed 909".</li>
</ol>
<p><strong>Sample JAD</strong></p>
<pre><code>MIDlet-Jar-URL: MyApp.jar
MIDlet-Jar-Size: 201365
MIDlet-Name: MyApp
MIDlet-Vendor: EC1M
MicroEdition-Profile: MIDP-2.0
MicroEdition-Configuration: CLDC-1.1
MIDlet-Icon: logo.png
MIDlet-Push-1: sms://:6553,net.ec1m.MyApp.midp.MyAppMIDlet,*
MIDlet-Description: MyApp MIDlet
MIDlet-Permissions: javax.microedition.io.PushRegistry,javax.microedition.io.Connector.sms...
MIDlet-Version: 1.0.67 MIDlet-1: MyApp, logo.png,net.ec1m.MyApp.midp.MyAppMIDlet
MIDlet-Certificate-1-1: MIICODCCAaECBEKqpfswDQYJKoZIhvcNAQEEBQAwYz...=
MIDlet-Jar-RSA-SHA1: EUsAch/.../hEZOsJsiCjBOhNs/3FSw4=
</code></pre>
<p><strong>Sample Manifest</strong></p>
Manifest-Version: 1.0
MIDlet-Name: MyApp
Created-By: 1.4.2_05-b04 (Sun Microsystems Inc.)
MIDlet-Push-1: sms://:6553,net.ec1m.MyApp.midp.MyAppMIDlet,*
MIDlet-1: MyApp, logo.png, net.ec1m.MyApp.midp.MyAppMIDlet
MicroEdition-Configuration: CLDC-1.1
Ant-Version: Apache Ant 1.6.2
MIDlet-Icon: logo.png
MIDlet-Vendor: EC1M
MIDlet-Permissions: javax.microedition...
MIDlet-Version: 1.0.67
MicroEdition-Profile: MIDP-2.0
MIDlet-Description: MyApp MIDlet
示例 Ant 构建文件我已经把我们的EC1M ant build file在我们的网站上(希望)让这一切对您来说更容易一些。其他资源这个FAQ on the Nokia Forum值得一读。
关于java - 如何签署 Java Midlet?,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/1383771/
我正在编写一个具有以下签名的 Java 方法。 void Logger(Method method, Object[] args); 如果一个方法(例如 ABC() )调用此方法 Logger,它应该
我是 Java 新手。 我的问题是我的 Java 程序找不到我试图用作的图像文件一个 JButton。 (目前这段代码什么也没做,因为我只是得到了想要的外观第一的)。这是我的主课 代码: packag
好的,今天我在接受采访,我已经编写 Java 代码多年了。采访中说“Java 垃圾收集是一个棘手的问题,我有几个 friend 一直在努力弄清楚。你在这方面做得怎么样?”。她是想骗我吗?还是我的一生都
我的 friend 给了我一个谜语让我解开。它是这样的: There are 100 people. Each one of them, in his turn, does the following
如果我将使用 Java 5 代码的应用程序编译成字节码,生成的 .class 文件是否能够在 Java 1.4 下运行? 如果后者可以工作并且我正在尝试在我的 Java 1.4 应用程序中使用 Jav
有关于why Java doesn't support unsigned types的问题以及一些关于处理无符号类型的问题。我做了一些搜索,似乎 Scala 也不支持无符号数据类型。限制是Java和S
我只是想知道在一个 java 版本中生成的字节码是否可以在其他 java 版本上运行 最佳答案 通常,字节码无需修改即可在 较新 版本的 Java 上运行。它不会在旧版本上运行,除非您使用特殊参数 (
我有一个关于在命令提示符下执行 java 程序的基本问题。 在某些机器上我们需要指定 -cp 。 (类路径)同时执行java程序 (test为java文件名与.class文件存在于同一目录下) jav
我已经阅读 StackOverflow 有一段时间了,现在我才鼓起勇气提出问题。我今年 20 岁,目前在我的家乡(罗马尼亚克卢日-纳波卡)就读 IT 大学。足以介绍:D。 基本上,我有一家提供簿记应用
我有 public JSONObject parseXML(String xml) { JSONObject jsonObject = XML.toJSONObject(xml); r
我已经在 Java 中实现了带有动态类型的简单解释语言。不幸的是我遇到了以下问题。测试时如下代码: def main() { def ks = Map[[1, 2]].keySet()
一直提示输入 1 到 10 的数字 - 结果应将 st、rd、th 和 nd 添加到数字中。编写一个程序,提示用户输入 1 到 10 之间的任意整数,然后以序数形式显示该整数并附加后缀。 public
我有这个 DownloadFile.java 并按预期下载该文件: import java.io.*; import java.net.URL; public class DownloadFile {
我想在 GUI 上添加延迟。我放置了 2 个 for 循环,然后重新绘制了一个标签,但这 2 个 for 循环一个接一个地执行,并且标签被重新绘制到最后一个。 我能做什么? for(int i=0;
我正在对对象 Student 的列表项进行一些测试,但是我更喜欢在 java 类对象中创建硬编码列表,然后从那里提取数据,而不是连接到数据库并在结果集中选择记录。然而,自从我这样做以来已经很长时间了,
我知道对象创建分为三个部分: 声明 实例化 初始化 classA{} classB extends classA{} classA obj = new classB(1,1); 实例化 它必须使用
我有兴趣使用 GPRS 构建车辆跟踪系统。但是,我有一些问题要问以前做过此操作的人: GPRS 是最好的技术吗?人们意识到任何问题吗? 我计划使用 Java/Java EE - 有更好的技术吗? 如果
我可以通过递归方法反转数组,例如:数组={1,2,3,4,5} 数组结果={5,4,3,2,1}但我的结果是相同的数组,我不知道为什么,请帮助我。 public class Recursion { p
有这样的标准方式吗? 包括 Java源代码-测试代码- Ant 或 Maven联合单元持续集成(可能是巡航控制)ClearCase 版本控制工具部署到应用服务器 最后我希望有一个自动构建和集成环境。
我什至不知道这是否可能,我非常怀疑它是否可能,但如果可以,您能告诉我怎么做吗?我只是想知道如何从打印机打印一些文本。 有什么想法吗? 最佳答案 这里有更简单的事情。 import javax.swin
我是一名优秀的程序员,十分优秀!