Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
RE: [dsdp-mtj-dev] Signing enhancement requirements

Hello Everyone,

I was looking at the MIDP specification and I found the following section: "If multiple CA's are used then all the signer certificates in the application descriptor MUST contain the same public key.".

So as far as i understood it is not possible to sign an application with more than one private key. Am i misunderstanding something ? If yes, can anyone please describe the use case with more details ?

I hope I could make myself clear,

David Marques

-----Original Message-----
From: dsdp-mtj-dev-bounces@xxxxxxxxxxx on behalf of Craig Setera
Sent: Thu 3/5/2009 8:15 PM
To: Mobile Tools for The Java Platform mailing list
Subject: Re: [dsdp-mtj-dev] Signing enhancement requirements
 
It is a great target to support multiple signings.  It didn't exist in 
EclipseME.  Seems like a good 1.0+ feature addition to me.

Hildum Eric-XFQ473 wrote:
> Sorry, I was not clear. I was not thinking of signing with more than 
> one alias in a single operation. I was thinking of signing the 
> application with several different aliases serially. So for example, 
> an application might be signed by Java Verified and also by the 
> developer - there would be multiple signatures in the JAD file.
>  
> For example, suppose I had a partnership with multiple carriers, and 
> they allowed me to sign with their key. I would want a single JAD file 
> signed with all the different keys so I could ship one JAD/JAR to all 
> phones on those carriers.
>  
> Eric Hildum
> Senior Product Manager, Mobile Developer Tools & SDK
> Software Platforms and Delivery
> Ecosystem and Market Development
> Motorola
> Direct: +1-408-541-6809
> Mobile: +1-510-305-0801
>  
> 809 11th Avenue
> Sunnyvale, CA 94089
> USA
>  
>
> ------------------------------------------------------------------------
> *From:* dsdp-mtj-dev-bounces@xxxxxxxxxxx 
> [mailto:dsdp-mtj-dev-bounces@xxxxxxxxxxx] *On Behalf Of *Paula 
> Gustavo-WGP010
> *Sent:* Thursday, March 05, 2009 10:00
> *To:* Mobile Tools for The Java Platform mailing list
> *Subject:* RES: [dsdp-mtj-dev] Signing enhancement requirements
>
> Hi eric,
>
>  
>
> As far as i remember the signing only allows the selection of a single 
> alias. I'm not sure how to do the sign based on multiple alias since 
> each alias is associated with an entry on the keystore
>
>  
>
> J
>
> gep
>
>  
>
> ------------------------------------------------------------------------
>
> *De:* dsdp-mtj-dev-bounces@xxxxxxxxxxx 
> [mailto:dsdp-mtj-dev-bounces@xxxxxxxxxxx] *Em nome de *Hildum Eric-XFQ473
> *Enviada em:* quinta-feira, 5 de março de 2009 13:24
> *Para:* Mobile Tools for The Java Platform mailing list
> *Assunto:* RE: [dsdp-mtj-dev] Signing enhancement requirements
>
>  
>
> Do we need  to support signing with multiple aliases at the same time? 
> It is not clear from the requirements if this case has been considered.
>
>  
>
> Eric Hildum
>
> Senior Product Manager, Mobile Developer Tools & SDK
>
> Software Platforms and Delivery
>
> Ecosystem and Market Development
>
> Motorola
>
> Direct: +1-408-541-6809
>
> Mobile: +1-510-305-0801
>
>  
>
> 809 11th Avenue
>
> Sunnyvale, CA 94089
>
> USA
>
>  
>
>  
>
> ------------------------------------------------------------------------
>
> *From:* dsdp-mtj-dev-bounces@xxxxxxxxxxx 
> [mailto:dsdp-mtj-dev-bounces@xxxxxxxxxxx] *On Behalf Of *Marques 
> David-wtv368
> *Sent:* Thursday, March 05, 2009 4:16
> *To:* Mobile Tools for The Java Platform mailing list; 
> dsdp-mtj-dev@xxxxxxxxxxx
> *Subject:* RE: [dsdp-mtj-dev] Signing enhancement requirements
>
> Follows the link to the requirements 
> (http://wiki.eclipse.org/DSDP/MTJ/Requirements/Signing/keystore_management).
>
> Best Regards,
>
> David Marques
>
> -----Original Message-----
> From: dsdp-mtj-dev-bounces@xxxxxxxxxxx on behalf of Marques David-wtv368
> Sent: Thu 3/5/2009 7:15 AM
> To: dsdp-mtj-dev@xxxxxxxxxxx
> Subject: [dsdp-mtj-dev] Signing enhancement requirements
>
> Hello everyone,
>
>    I just finished writing the requirements for the signing 
> enhancement. It would be nice if everyone could take some time to look 
> at it! Hope to hear your comments.
>
> Best Regards,
>
> David Marques
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> dsdp-mtj-dev mailing list
> dsdp-mtj-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/dsdp-mtj-dev
>   

<<winmail.dat>>


Back to the top