Re: 3rd time request... PLEASE help! Phone cert creation
I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybe something more. He explains how to import a *personal* certificate and a CA certificate on a PocketPC, running Windows Mobile 2003. I have tryed the same on a Windows 2002 Smartphone and it doesn't work, but I think it could work on windows Mobile 2003, becuse it worked in my PocketPC PDA. You could also try to use a little CryptoAPI program for that. Again ,I suspect this is not the right forum ;-). Hope this helps - Original Message - From: "David Templar" <[EMAIL PROTECTED]> To: Sent: Tuesday, July 12, 2005 5:49 PM Subject: 3rd time request... PLEASE help! Phone cert creation > Hi all, > > I am really stuck and have tried all I can - I really need your help to > generate a software publishing certificate and its root cert to install > on motorola phones. > > I am enclosing a copy of an already existing cert on the phone. It > appears to be a V4 x509 cert - I could be wrong though. The phone does > not seem to accept any certificates I have currently generated. Someone > said to delete the first 2 octets, using that I can read the file now, > but how do I generate a certificate like it?? The certificate is called > motman.crt, but I have attached it as motman.txt as the openssly posting > does not allow .crt extensions. > > The certificate I have enclosed is new to me, and myself as well as > others are having a problem working out what it is... > > Please tell me how to create my own certificates like it either using > openssl or any other tool. > > Your help is really needed and appreciated - even if you cannot help, > please tell me where I can get some help... > > Thanks in advance, > > David > > 0,©0,' 0 *?H?÷0y1 0 UUS10UIllinois10U Libertyville10U > Motorola Inc1 0 > U PCS10UMotorola Java CA40003082107Z18082107Z01 0 UUS10UIllinois10U Libertyville10U > Motorola Inc1 0 > U PCS1!0UManufacturer Domain 40-10,"0 *?H?÷,0, > ,©ºAJ>^<ÇòÑ-,øæ=>2 ѽv¨#pË"¿T&9"×~.(Ø"[EMAIL PROTECTED](ãL¥_,<ì?á"7?=CÏ:¶Ø¦åvñ¨s?wìr';µ46wëȪq?³S r[êe¡Þ± /¬>qyâÿEýBo«"ò?gçùsͺ§.of]iïÏÐ8O¤a,ÁâZ×ZMá¡YùÅTs\ 1~71#¸æß?.éÃÕìÕ'+ÉÇ .Ù-s :Ðfg¿h´ÙÛAP-²"¸§¼fý>zQmQ båÆpA"¯?#&o»Sþã»Ïø¶fôêïfí®iqKlò«½¨*O5,>vÝhq?BZß¿O,ºmÓU~?fupþÏ0G¹-Àf åJ4à,æ/Îòú ¤è»f~1½TϧþÇQÜ,°m?õ÷Z?°)ú ¡®9¢³H<µ®_ÎL9¯kãna¹W½ÚêGÛ Ù²»è 0¥K0ûñyl:¿Ã-_¿b0 __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: 3rd time request... PLEASE help! Phone cert creation
Thanks, it does help a bit... could you tell me about the cryptoapi program? But I will say that it is not a smartphone. It uses standard motorola software and its jce package All I really need to do is convert my standard certs to the motman.crt file I had attached. I have tried everything else - including using the windows sdk to create certificates. Importing certificates on motorola can only be done by manually placing the certificate in the x509 directory - hence the need to be able to generate a certificate that complies with the format. The reason why I am posting here is because openssl (I have been using for many years) comes with cert creation abilities - it has helped me for many years with PC java! Also, I was hoping I would be able to ask many crypto experts on the forum! RGDS David Pablo J Royo wrote: I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybe something more. He explains how to import a *personal* certificate and a CA certificate on a PocketPC, running Windows Mobile 2003. I have tryed the same on a Windows 2002 Smartphone and it doesn't work, but I think it could work on windows Mobile 2003, becuse it worked in my PocketPC PDA. You could also try to use a little CryptoAPI program for that. Again ,I suspect this is not the right forum ;-). Hope this helps - Original Message - From: "David Templar" <[EMAIL PROTECTED]> To: Sent: Tuesday, July 12, 2005 5:49 PM Subject: 3rd time request... PLEASE help! Phone cert creation Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It appears to be a V4 x509 cert - I could be wrong though. The phone does not seem to accept any certificates I have currently generated. Someone said to delete the first 2 octets, using that I can read the file now, but how do I generate a certificate like it?? The certificate is called motman.crt, but I have attached it as motman.txt as the openssly posting does not allow .crt extensions. The certificate I have enclosed is new to me, and myself as well as others are having a problem working out what it is... Please tell me how to create my own certificates like it either using openssl or any other tool. Your help is really needed and appreciated - even if you cannot help, please tell me where I can get some help... Thanks in advance, David 0,©0,' 0 *?H?÷0y1 0 UUS10UIllinois10U Libertyville10U Motorola Inc1 0 U PCS10UMotorola Java CA40003082107Z18082107Z01 0 UUS10UIllinois10U Libertyville10U Motorola Inc1 0 U PCS1!0UManufacturer Domain 40-10,"0 *?H?÷,0, ,©ºAJ>^<ÇòÑ-,øæ=>2 ѽv¨#pË"¿T&9"×~.(Ø"7O°k@¨¬a(ãL¥_,<ì?á"7?=CÏ:¶Ø¦åvñ¨s?wìr';µ46wëȪq?³S r[êe¡Þ± /¬>qyâÿEýBo«"ò?gçùsͺ§.of]iïÏÐ8O¤a,ÁâZ×ZMá¡YùÅTs\ 1~71#¸æß?.éÃÕìÕ'+ÉÇ .Ù-s :Ðfg¿h´ÙÛAP-²"¸§¼fý>zQmQ båÆpA"¯?#&o»Sþã»Ïø¶fôêïfí®iqKlò«½¨*O5,>vÝhq?BZß¿O,ºmÓU~?fupþÏ0G¹-Àf åJ4à,æ/Îòú ¤è»f~1½TϧþÇQÜ,°m?õ÷Z?°)ú ¡®9¢³H<µ®_ÎL9¯kãna¹W½ÚêGÛ Ù²»è 0¥K0ûñyl:¿Ã-_¿b0 __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: 3rd time request... PLEASE help! Phone cert creation
Hi, CryptoAPI is the security API of Microsoft. If you are using a Pocket PC or SmartPhone you can use a subset of functions of that API (that is completely supported on NT). You can have a look to openssl-dev and will find a message from me giving support to build OpenSSL for Pocket PC or Windows Mobile 2003 with full access to the openssl.exe application by using a console on the device (a little difficult to use with the Soft Input Panel but ok to have openssl everywhere). For your concrete problem may you can ask in a Motorola forum or to anybody who knows flex operating system (the one from Motorola). Daniel Díaz [EMAIL PROTECTED] De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de David Templar Enviado el: martes, 12 de julio de 2005 20:01 Para: openssl-users@openssl.org Asunto: Re: 3rd time request... PLEASE help! Phone cert creation Thanks, it does help a bit... could you tell me about the cryptoapi program? But I will say that it is not a smartphone. It uses standard motorola software and its jce package All I really need to do is convert my standard certs to the motman.crt file I had attached. I have tried everything else - including using the windows sdk to create certificates. Importing certificates on motorola can only be done by manually placing the certificate in the x509 directory - hence the need to be able to generate a certificate that complies with the format. The reason why I am posting here is because openssl (I have been using for many years) comes with cert creation abilities - it has helped me for many years with PC java! Also, I was hoping I would be able to ask many crypto experts on the forum! RGDS David Pablo J Royo wrote: I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybesomething more.He explains how to import a *personal* certificate and a CA certificate on aPocketPC, running Windows Mobile 2003.I have tryed the same on a Windows 2002 Smartphone and it doesn't work, butI think it could work on windows Mobile 2003, becuse it worked in myPocketPC PDA.You could also try to use a little CryptoAPI program for that. Again ,Isuspect this is not the right forum ;-). Hope this helps - Original Message -From: "David Templar" <[EMAIL PROTECTED]>To: Sent: Tuesday, July 12, 2005 5:49 PMSubject: 3rd time request... PLEASE help! Phone cert creation Hi all, I am really stuck and have tried all I can - I really need your help togenerate a software publishing certificate and its root cert to installon motorola phones. I am enclosing a copy of an already existing cert on the phone. Itappears to be a V4 x509 cert - I could be wrong though. The phone doesnot seem to accept any certificates I have currently generated. Someonesaid to delete the first 2 octets, using that I can read the file now,but how do I generate a certificate like it?? The certificate is calledmotman.crt, but I have attached it as motman.txt as the openssly postingdoes not allow .crt extensions. The certificate I have enclosed is new to me, and myself as well asothers are having a problem working out what it is... Please tell me how to create my own certificates like it either usingopenssl or any other tool. Your help is really needed and appreciated - even if you cannot help,please tell me where I can get some help... Thanks in advance, David 0, ©0,[1]' [1][1][1]0 *?H?÷0y1 0 U [1]US10 U Illinois10 U Libertyville10 U Motorola Inc1 0 U PCS10 U Motorola Java CA400‑03082107Z18082107Z01 0 U [1]US10 U Illinois10 U Libertyville10 U Motorola Inc1 0 U PCS1!0 U Manufacturer Domain 40-10,"0 *?H?÷ ,0,[1],©ºAJ>^<ÇòÑ-,øæ=>2 ѽv¨#pË "¿T&9"×~.(Ø"[EMAIL PROTECTED](ãL¥_,<ì?á"7?=CÏ:¶Ø¦åvñ¨s?wì[1]2ÂT©õ˹yøíSÞä%ôB [EMAIL PROTECTED]>r';µ46wëȪq?³Sr[êe¡Þ± /¬>qyâÿEýBo‑«"ò?gçùsͺ§.of]iïÏÐ8O¤a,ÁâZ×ZMá¡[1]YùÅTs\1~71#¸æß?.éÃÕìÕ'+ ÉÇ .Ù-s :Ðfg¿h´ÙÛAP-²"¸§¼fý>zQmQbåÆpA"¯?#&o»Sþã»Ïø¶fôêïfí®iqKlò«½¨*O 5,>vÝhq?BZß¿O,ºmÓU~?fupþÏ0G¹-ÀfåJ4à,æ/[1]Îòú ¤è»f~1½TϧþÇQÜ,°m?õ÷Z?°)ú ¡®9¢³H<µ®_ÎL9¯kãna¹W½ÚêGÛ Ù²»è0¥K0ûñyl:¿Ã-_¿b0 __OpenSSL Project http://www.openssl.orgUser Support Mailing List openssl-users@openssl.orgAutomated List Manager [EMAIL PROTECTED]
Re: 3rd time request... PLEASE help! Phone cert creation
Thankyou for the reply. I have tried the microsoft sdk and the matter is not resolved. Motorola will not help with certificates, they want you to send them your code and they will sign it if the like it - after 6-8 weeks of an application process! The only hope I have is to create my own certificates of the format of the motman.crt that I had attached with the original post. So far what I know about the cert: 1. the first 2 octets are used to say how many certs in the chain. 2. that it can be read using asn1 readers. 3. that it may use a 128 & 140 bit key and signature Daniel Diaz Sanchez wrote: Hi, CryptoAPI is the security API of Microsoft. If you are using a Pocket PC or SmartPhone you can use a subset of functions of that API (that is completely supported on NT). You can have a look to openssl-dev and will find a message from me giving support to build OpenSSL for Pocket PC or Windows Mobile 2003 with full access to the openssl.exe application by using a console on the device (a little difficult to use with the Soft Input Panel but ok to have openssl everywhere). For your concrete problem may you can ask in a Motorola forum or to anybody who knows flex operating system (the one from Motorola). Daniel Díaz [EMAIL PROTECTED] De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] En nombre de David Templar Enviado el: martes, 12 de julio de 2005 20:01 Para: openssl-users@openssl.org Asunto: Re: 3rd time request... PLEASE help! Phone cert creation Thanks, it does help a bit... could you tell me about the cryptoapi program? But I will say that it is not a smartphone. It uses standard motorola software and its jce package All I really need to do is convert my standard certs to the motman.crt file I had attached. I have tried everything else - including using the windows sdk to create certificates. Importing certificates on motorola can only be done by manually placing the certificate in the x509 directory - hence the need to be able to generate a certificate that complies with the format. The reason why I am posting here is because openssl (I have been using for many years) comes with cert creation abilities - it has helped me for many years with PC java! Also, I was hoping I would be able to ask many crypto experts on the forum! RGDS David Pablo J Royo wrote: I suppose this is not the right forum to ask for Smartphone issues. Anyway, here: http://www.jacco2.dds.nl/networking/crtimprt.html may be you could find a way to do what you need , a little idea or maybe something more. He explains how to import a *personal* certificate and a CA certificate on a PocketPC, running Windows Mobile 2003. I have tryed the same on a Windows 2002 Smartphone and it doesn't work, but I think it could work on windows Mobile 2003, becuse it worked in my PocketPC PDA. You could also try to use a little CryptoAPI program for that. Again ,I suspect this is not the right forum ;-). Hope this helps - Original Message - From: "David Templar" <[EMAIL PROTECTED]> To: Sent: Tuesday, July 12, 2005 5:49 PM Subject: 3rd time request... PLEASE help! Phone cert creation Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It appears to be a V4 x509 cert - I could be wrong though. The phone does not seem to accept any certificates I have currently generated. Someone said to delete the first 2 octets, using that I can read the file now, but how do I generate a certificate like it?? The certificate is called motman.crt, but I have attached it as motman.txt as the openssly posting does not allow .crt extensions. The certificate I have enclosed is new to me, and myself as well as others are having a problem working out what it is... Please tell me how to create my own certificates like it either using openssl or any other tool. Your help is really needed and appreciated - even if you cannot help, please tell me where I can get some help... Thanks in advance, David 0, ©0,[1]' [1][1][1]0 *?H?÷0y1 0 U [1]US10 U Illinois10 U Libertyville10 U Motorola Inc1 0 U PCS10 U Motorola Java CA400‑03082107Z18082107Z01 0 U [1]US10 U Illinois10 U Libertyville10 U Motorola Inc1 0 U PCS1!0 U Manufacture
Re: 3rd time request... PLEASE help! Phone cert creation
On Tue, Jul 12, 2005, David Templar wrote: > Hi all, > > I am really stuck and have tried all I can - I really need your help to > generate a software publishing certificate and its root cert to install > on motorola phones. > > I am enclosing a copy of an already existing cert on the phone. It > appears to be a V4 x509 cert - I could be wrong though. The phone does > not seem to accept any certificates I have currently generated. Someone > said to delete the first 2 octets, using that I can read the file now, > but how do I generate a certificate like it?? The certificate is called > motman.crt, but I have attached it as motman.txt as the openssly posting > does not allow .crt extensions. > Its V3 X509 with two additional bytes prepended. IF you want to generate it just take a DER format file and prepend the same bytes. However there may not be a solution to your problem. I know of a couple of phones that deliberately have no way to add new CA certificates. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: 3rd time request... PLEASE help! Phone cert creation
Thanks, I will try this within the next hour to see what happens. Is there a key size or any other issues that I need to consider when I generate a new cert now? Dr. Stephen Henson wrote: On Tue, Jul 12, 2005, David Templar wrote: Hi all, I am really stuck and have tried all I can - I really need your help to generate a software publishing certificate and its root cert to install on motorola phones. I am enclosing a copy of an already existing cert on the phone. It appears to be a V4 x509 cert - I could be wrong though. The phone does not seem to accept any certificates I have currently generated. Someone said to delete the first 2 octets, using that I can read the file now, but how do I generate a certificate like it?? The certificate is called motman.crt, but I have attached it as motman.txt as the openssly posting does not allow .crt extensions. Its V3 X509 with two additional bytes prepended. IF you want to generate it just take a DER format file and prepend the same bytes. However there may not be a solution to your problem. I know of a couple of phones that deliberately have no way to add new CA certificates. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]