[masterfu]

Hello. I am developing an Application which uses JSR 75 and MMAPI. I understand that I will have to sign my MIDlet in order to grant permission to both APIs without asking every time (Writing files and taking snapshots).
But I am not willing to pay $400+ for a Verisign certificate just for testing! (If one day I'm no longer a poor student, I might take this into consideration, but certainly not only for testing)

So, my question is this: Is there any possibility to get a free certificate signed for testing purposes? I have heard that for symbian there is such a possibility at www.symbiansigned.com where they create free certificates which are valid for only one device / IMEI.

Thanks for answers

[hartti]

In general (see the footnote), you have access to these APIs also from unsigned MIDlets. However the user is presented confirmation dialogs before the APIs are accessed. The MIDlets have default access rights and you can also manually change the settings a little restrictive ones for each API (check the MIDP spec for recommended security policy settings).

Also Thawte certificate should be a little less expensive (but still too expensive for a student I guess)

MIDP spec disallows installation of code signing certificates after manufacturing. On some device this might be possible though (S60 2nd Edition for example)

Hartti

(footnote: some operator branded phones might have more restrictions in place. Is your phone a branded one?)

[masterfu]

... without asking every time

I know that I can grant permission also for unsigned MIDlets, but access to JSR 75 asks every time I want to write a file. (And I can set permission only to "Ask every time" or "Never allow") However, my application is designed to write several files unattended, so testing this is becoming quite a pain.

I believe that my device is branded, although I don't know exactly what that means. My provider is O2 Germany. But I don't see how this could bring me any further, since I have to cope with the restrictions given.

Anyway: How can I find out which root certificates are installed on a device?

Thanks for your reply

[traud]

For such a project stick to the emulator like the Java Platform SDKs. There you can adjust the trust setting like you want and these SDKs are very, very near to a real device.

In the future, please use the search feature on the upper left of this forum.

As hartti pointed out, there is no alternative to thawte, VeriSign or Java Verified. A professional MIDlet author even uses thawte+VeriSign or VerSign+Java Verfied.

Your device (operator) does not have more restricted policies in force.

[dyuen000]

I think Sybmian signed certificate does not work on J2ME app

[masterfu]

I think Sybmian signed certificate does not work on J2ME app

That's exactly what I believe, which is why I was asking for a similar way like they do on symbiansigned.

[traud]

This is why I answered – there is no similar way.