Motorola E680 Technical Manual - Page 99

Verification Result

Page 99 highlights

21 MIDP 2.0 Security Model 4. Use the signer's public key, signature, and SHA-1 digest of JAR to verify the signature. If the signature verification fails, reject the JAD and MIDlet suite. The MIDlet suite will not be installed or allow MIDlets from the MIDlet suite to be invoked as shown in the following table. 5. Once the certificate, signature, and JAR have been verified, the MIDlet suite is known to be trusted and will be installed (authentication process will be performed during installation). The following is a summary of MIDlet suite verification including dialog prompts: Initial State Verification Result JAD not present, JAR downloaded Authentication can not be performed, will install JAR. MIDlet suite is treated as untrusted. The following error prompt will be shown, "Application installed, but may have limited functionality." JAD present but is JAR is unsigned Authentication can not be performed, will install JAR. MIDlet suite is treated as untrusted. The following error prompt will be shown, "Application installed, but may have limited functionality." JAR signed but no root certificate Authentication can not be performed. JAR installation will not be present in the keystore to validate allowed. The following error prompt will be shown, "Root certificate the certificate chain missing. Application not installed." JAR signed, a certificate on the path is expired Authentication can not be completed. JAR installation will not be allowed. The following error prompt will be shown, "Expired Certificate. Application not installed." JAR signed, a certificate rejected for reasons other than expiration JAD rejected, JAR installation will not be allowed. The following error prompt will be shown, "Authentication Error. Application not installed." JAR signed, certificate path JAD rejected, JAR installation will not be allowed. The following error validated but signature verification prompt will be shown, "Authentication Error. Application not fails installed." Parsing of security attributes in JAD fails JAR signed, certificate path validated, signature verified JAD rejected, JAR installation will not be allowed. The following error prompt will be shown, "Failed Invalid File." JAR will be installed. The following prompt will be shown, "Installed." 99

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107

21
MIDP 2.0 Security Model
99
4.
Use the signer’s public key, signature, and SHA-1 digest of JAR to verify the
signature. If the signature verification fails, reject the JAD and MIDlet suite. The
MIDlet suite will not be installed or allow MIDlets from the MIDlet suite to be
invoked as shown in the following table.
5.
Once the certificate, signature, and JAR have been verified, the MIDlet suite is
known to be trusted and will be installed (authentication process will be
performed during installation).
The following is a summary of MIDlet suite verification including dialog prompts:
Initial State
Verification Result
JAD not present, JAR downloaded
Authentication can not be performed, will install JAR. MIDlet suite is
treated as untrusted. The following error prompt will be shown,
“Application installed, but may have limited functionality.”
JAD present but is JAR is
unsigned
Authentication can not be performed, will install JAR. MIDlet suite is
treated as untrusted. The following error prompt will be shown,
“Application installed, but may have limited functionality.”
JAR signed but no root certificate
present in the keystore to validate
the certificate chain
Authentication can not be performed. JAR installation will not be
allowed. The following error prompt will be shown, “Root certificate
missing. Application not installed.”
JAR signed, a certificate on the
path is expired
Authentication can not be completed. JAR installation will not be
allowed. The following error prompt will be shown, “Expired
Certificate. Application not installed.”
JAR signed, a certificate rejected
for reasons other than expiration
JAD rejected, JAR installation will not be allowed. The following error
prompt will be shown, “Authentication Error. Application not
installed.”
JAR signed, certificate path
validated but signature verification
fails
JAD rejected, JAR installation will not be allowed. The following error
prompt will be shown, “Authentication Error. Application not
installed.”
Parsing of security attributes in
JAD fails
JAD rejected, JAR installation will not be allowed. The following error
prompt will be shown, “Failed Invalid File.”
JAR signed, certificate path
validated, signature verified
JAR will be installed. The following prompt will be shown, “Installed.”