There shared certificate truststore is BB OS 7 +?

My company explores opportunities to develop its application for the BB platform.

For iOS, we learned the hardway that ther eis no shared truststore X.509 client-side only certificates obtained by a soft for use by the user in other applications.

For Android since version 4.1, this seems to be one available.

Now my question 2 I hope this community can answer for me:

1)

Is the BB truststore for client certificates also shared? That is to say. can get my application a client X.509 certificate and the corresponding key pair, manage it and make it available to other applications running on the device of BB?

2)

What is the maximum supported key length for the RSA and elliptic curves of X.509 certificates customer on the BB platform?

Thanks in advance!

Hello

The architecture is different for BlackBerry 7 and 10 of BlackBerry.

BlackBerry 7 there are classes like this;

http://www.BlackBerry.com/developers/docs/7.1.0api/NET/rim/device/API/crypto/keystore/DeviceKeyStore...

BlackBerry 10 there is no API available at this time.

Thank you!

Tags: BlackBerry Developers

Similar Questions

  • My Windows 7 is 'Disable Java' in the Java Control Panel Security tab. There only certificates.

    I'm trying to disable Java. Their site says to go to the control panel Java, Security tab and uncheck "Enable Java in the browser". I not give me that option, as under the Security tab it lists only "certificates."

    This is because you have updated V.7 9 or less. To display this tab, you need to update your Java. Quite ironic; You must update to disable :-)

    You can either do, or go to Internet Options, open the tab programs, and then click on 'Manage Add-ons'. Under 'display... '. "Select"All add-ons", scroll to the Oracle America in the right column, and then clear each of the items under it.

    SC Tom

  • On ASA 5520 SSL certificate configuration

    Hello

    I have an SSL certificate from a third party that shows under the identity of ADSM, howerver analysis of verification of the firewall shows that the SSL certificate is signed with an unknown certification Authority. I installed through primary and secondary certificate from the third party under the authority of certification the SMDA but when I check the SSL certificate it still shows as self-signed. Don't miss what other measures. I have attached a few screenshots.

    Thank you for your help.

    Wo

    Hello

    You have activated the correct trustpoint in Configuration > device management > advanced > component settings SSL? On this screen, there a "Certificates" section where you can select the trustpoint appropriate for each interface.

    The trustpoint will reference the certificate that you imported, and the interface will reference this trustpoint. Until you activate, the ASA will continue to use the self-signed certificate.

    Hope that helps.

    -Mike

  • Urgent: Not able to change the certificate in DPS app Builder

    Hello

    We are about to publish an application with the individual edition license. We did a version and then the customer discovered that the certificate must be changed.

    However, when we try to create the application, then fill in the information, there is no option to change the certificate - only configuration profiles.

    We tried searching high and low and you have not found a solution. In addition, the button Delete is grey is not possible to erase and start over.

    How can we change the certificate? The attached screen shows the screen after uploaded Prov. profiles, but there are certificate is checked while the CERT has not yet been added.

    BR,

    Mikkel

    Skærmbillede 2013-02-05 kl. 14.01.12.png

    Mikkel, you can only choose mobile configuration files. Once you click on create app it will generate the application.

    Once you click on the Finish button. It will give you two files developer.ipa and distribution.zip.

    When you download developer.ipa it will give you a different dialog box that ask you to select the developer & partner and developer .p12 certificate mobile service password file.

    Then click on the sign and download it. See attached screenshot:

  • Public client, Protocol TLS, keystore and SSLContext

    Hello

    Hope this isn't a double post, I have not found one relevant for answering my questions... (im not natively English speaking, I have lack certain keywords when searching)

    I'm developing a Client/Server Java using JSSE application to manage the TLS connection.

    The client will be available to the public, and it is the connection with the server must be guaranteed by an x509v3 certificate.
    It's actually using a self-generated x509v1 certificate, but what I read leads me to the conclusion that when we buy an x509v3 certificate, it works exactly the same way.

    For first test SSL (I'm using the SSLEngine class), I have generated keystore and truststores for the client and the server, with the same certificate.

    Here's how I generated what I need:

    keytool - genkeypair-alias mytest - keyalg RSA-validity 360 - / home/pitt/keystore keystore
    keytool-export - alias mytest - / home/pitt/keystore keystore - rfc-file selfsigned.cer
    keytool-import - alias mytest-file selfsigned.cer - keystore/home/pitt/truststore

    Now that we are preparing a first public version, I would say the districts of certificate.

    So here are my questions:

    Is it possible to have no client supplied with the distribution certificate and have a connection to the server?

    To try this, I modified my code:

    First on SSLEngine my server, which uses the truststore and the keystore generated above:

    engine.setNeedClientAuth (false);

    On the client, I tried to use the default keystore:

    Plant of approved = TrustManagerFactory.getInstance ("PKIX");
    KeyStore ks = null;
    Factory.init (KS);
    CTX = SSLContext.getInstance ("TLS");
    CTX.init (factory.getTrustManagers (), null, null);

    Result: my server raises "received fatal alert: certificate_unknown. I assumed that the customer must provide a certificate that is trusted by the server.
    Am I wrong?
    If I'm wrong, how can I implement this without embending any certificate store / in the client? Or do I just have to provide the certificate from the server to the client, if yes how?...

    If the customer must provide a certificate to establish a connection, is it not dangerous to have the same certificate in all cases of customers?

    If that's what I do, how can I achieve this?
    Even after a lot of research, I'm a little confused with the keystore/certificates/truststores. So should I provide a key file to the client? What should it contain? What should I add to the server key/truststore...?

    Sorry, it is not very clear to me, it is implemented and cryptographic logic, hope that someone will be kind enough to enlighten my poor brain :)

    Thanks in advance!

    Is it possible to have no client supplied with the distribution certificate and have a connection to the server?

    Yes, as long as the server certificate is signed by a certification authority or you distribute a truststore contains with the customer.

    Result: my server raises "received fatal alert: certificate_unknown. I assumed that the customer must provide a certificate that is trusted by the server.

    No, the server must provide a certificate approved by the customer. The reverse case is an option that you disabled.

    How can I implement this without embending any certificate store / in the client?

    Download the certificate signed by a certification authority.

    If the customer must provide a certificate to establish a connection, is it not dangerous to have the same certificate in all cases of customers?

    Not only dangerous but unnecessary. The client certificate is meant to uniquely identify a specific customer. If it does that there is no point to it whatsoever.

    So should I provide a key file to the client?

    Never. If the client authentication is needed customers must provide their own keystore. You can't do it for them. But you don't need at all in this case.

    What should I add to the server key/truststore...?

    If you the client authentication, the server must do trust the certificate of the client, because it is signed by a certification authority, either because it has been imported in truststore for the server. Is not necessary in this case.

    Sorry, that's not very clear to me

    It's actually very simple.

    1. for a trust B, B must have a unique certificate in the keystore that is approved by A truststore, it was signed by a CA or because it has been imported in the truststore.
    2. in SSL, the client must trust the server, i.e. the client requires the authentication of the server.
    3. in SSL, it is possible to have the server want or need authentication of the client.
    4. it is also possible to reverse the roles of client and server in the handshake.

  • Contacts/Mac OS x Server Push Notifications and macOS strange behavior Sierra Server

    I have Sierra macOS Server 5.2 and the same "user01" account configured in Contacts.app on two computers of macOS Sierra 10.12 and a device unique 10.0.2 iOS (iPad). My expectation is that change on a device (for example to add a new contact) is in a few seconds on all other devices that are configured with the same account. However, this is not always true.

    Invocation of manual synchronization (quit Contacts.app, start it again) still works correctly. However the changes on a device (for example to add a new contact) are not pushed to all devices. Usually, the change is pushed and data are synchronized immediately only to the last device configured with the account. Other devices configured with the same account are not automatically updated.

    There are certificates valid push (push works on all devices, it's just seem to depend on which is configured earlier and who later).

    The same applies to the Calendar.app calendar events using the Protocol CalDAV, push calendar notifications and server for macOS.

    In the newspaper of apsd, on Mac OS processes, can even be considered that push message arrived at the apsd process, he was in the process of Contacts. The difference is, however, that AddressBookSourceSync process is not upload all the changes from the calendar server and macOS Contacts. Sometimes, the push message does not seem to happen Server NPP (based on the apsctl for the apsd log tool).

    The problem has been caused with a single device by push-topic Subscribe APNS.

  • Only some inaccessible files on network

    I'm having a problem with access to my files on my network. The problem is not consistent in all files, or even all of the files in certain folders. It all seems like a collection of random files across to the refusal to be open by another PC by PC. It has nothing to do with the size of the file - some small txt documents and jpegs will not open while a 500 MB video will flow seamlessly. Also, it seems to vary from one program to a program - a problem txt file may not open in Notepad, but it will BE opened in MS Word!

    The problem files will not open more where they are, nor can I copy them to the remote PC for the remote computer (if I try to transfer them from the host PC, it seems to work correctly)

    The content of the files, as seen on the remote PC, is quite accurate: it's just that when I click on some of the icons, I like that windows does not find the file I selected (or a similar message, for example "file not found", ect). I tried to open all files of problem on their host PC and they are still intact, is not a corruption of the HARD drive.

    On top of all the madness of this question, the host PC will not answer a ping from remote PCs, even if the remote PC can view there shared folders and access its files!

    Both my PC have good to very good WiFi reception - this isn't a signal of abandonment problem.

    The host PC uses Windows XP Home SP3 32-bit

    The use of PC remote Windows XP Home SP3 32-bit & Windows 7 Professional 64-bit

    Could someone please tell me what's happening, and more importantly, how I can solve this problem?

    It is a bit of a guess, but do the following (it does not hurt and can solve your problems):

    • Open network connections (start > run > ncpa.cpl > OK)
    • Make a right-click on the icon of the network adapter that you use to connect to your network local (looks like it is your wireless network adapter), and then select Properties
    • On the general tab, you should have a list of 'points', used by the connection.  Select "Protocol Internet (TCP/IP)" and click on the properties button
    • Under the following general tab (where you select how an IP address is assigned), click on the button "Advanced".
    • Select the tab "WINS."
    • Select the radio button "Enable NetBIOS over TCP/IP"
    • OK your way out
    • Check by opening a command prompt window (start > run > cmd OK) and typing

    ipconfig/all {press Enter}

    Make sure that the indicated line does NOT appear:

    ... The IP address: 192.168.1.50
    ... Subnet mask: 255.255.255.0.
    ... Default gateway. : 192.168.1.1.
    DHCP server...: 192.168.1.1.
    DNS servers...: 192.168.1.11
    192.168.1.33
    ---> NetBIOS over TCP/IP...: disabled
    Lease obtained...: Saturday, February 25, 2012 11:19:12
    End of the lease...: Saturday, February 25, 2012 11:19:12

    • Also check that the 'TCP/IP NetBIOS Assistance' service is started and that it has an "Automatic" Startup Type

    Start > run > services.msc > OK
    Scroll to support TCP/IP NetBIOS (double click to open properties in order to make any necessary changes)

  • Make the recovery with USB disks

    I have a HP Pavilion older m9300t Intel Core 2 Quad Q9300 2.50 GHz 4 GB 500 GB. HP told me that they no longer have the recovery discs available.  I bought a refurbished with no disk system.  The hard drive eventually crushed and I decided to keep the computer as it is beyond my needs.  I want to recover my software. I read that you can make the recovery disks with a USB key. It will work in safe mode? And we know if it's a system of 64 or 32-bit?

    If the disk hard th is crushed, then the recovery partition will be unreliable.

    Follow the instructions on the web HP to the address following document to find out how to order a set of recovery disks. Maybe it's a bit difficult because the desktop PC is three generations behind the current operating system.  Is there a certificate of Windows of authenticity with an activatinkey of license of twenty-five characters on the case somewhere?

    http://support.HP.com/us-en/document/bph07143

  • After discounting lost 8.1 Windows, moreover, Windows 8, asking to activate again.

    Original title: Windows asking to activate again.

    I used windows 8 on my Dell Vostro 2520. A couple of weeks, I've updated to 8.1 and I had no problem with windows 8.1. But since yesterday, I started to get continuous https errors, even to https://google.com the browser said there are certificate errors (my friends using the same wifi network I use had no such problem). Chrome told me that my date is not correct. My calendar showed 10024 year and there was also a warning that the date is out of range. I tried to change the date, but I got the message that it could not be changed. So I decided to restore my windows. I chose the option that keeps your personal files and removes all software. On the update page, it has been shown that "you'll have new update to windows 8.1". But restarting does not help me. I had the same problem of https, also lost 8.1 now my pc is Windows 8. And as he asks me to activate windows... Help me

    Hello Anu,

    Thanks for posting your query in Microsoft Community.

    I would be grateful if you could provide us with the following information:

    1. You get an error while activating Windows 8?
    2. You are able to access Web sites now?

    I understand your concern about your computer. I suggest to try the activation of Windows 8 with the product key of Windows 8 and try the update to Windows 8.1.

    See also,

    Why can't I activate Windows?

    Please return in the case of other issues related to Windows.

  • Use case details for people to let their inactive certifications.

    Larry has the following certifications (only shown important certifications).

    Oracle 10g DBA OCP

    Oracle 10g RAC OCÉ

    COM in Oracle 9i DBA

    There no 11g or 12 c database certifications.

    There his certificate proudly mounted in frames above his desk at work

    December 25, 2014, he buys a "Oracle Certified Master T-shirt" from the Oracle store.  He also finally gets round to download its Oracle 10 g DBA OCP Oracle 10 g RAC ECO and Oracle 9i DBA CMO logos of certview.

    January 1, 2015, he starts a blog and additions of oracle certification logo of to display in this blog.

    On March 1, 2015 it notifies its certifications will become inactive on Master 1 2016.

    Larry does not other certification exams and certifications March 1, become inactive.

    1) Larry keeps his certificates mounted on the office above his wall after March 1, 2016

    == > > It is OK to do or he missed his agreement with oracle certification. ?

    (2) Larry continues to update his blog and keep its logos oracle on his blog (he downloaded them before its certifications goes inactive).

    == > > It is OK to do or he missed his agreement with oracle certification. ?

    (3) 1 April 2016 Larry visits a conference his company will expose has and wears his «Oracle Certified Master T-shirt»

    == > > As its status as a CMO is now inactive have the right to do so or he missed his agreement with oracle certification. ?


    (4) on May 1, 2016 Larry becomes unhappy with his employer and written a new RESUME and he sends for some agencies and employs.  On his RESUME, he states that it is an oracle CMO. OCP and OCE.


    == > > As its certification status is now inactive have the right to do so or he missed his agreement with oracle certification. ?



    Thank you

    I'm not sorry that I was late on this. Matthew responded beautifully. We ask that candidates stop using certificates and logos when their certifications become inactive. In reality, we cannot police. Or what we want. Our goal is not not to punish someone for not to bend to our will. The goal is to help candidates upgrade and improve the program for all participants.

    All the certifications that holds a candidates who are not part of the requirement for recertification will be always considered as being active in CertView. CertView is updated to reflect clearly what certifications are active and which are not.

    Kind regards
    Brandye Barrington

    Certification Forum Moderator

  • Secure domain problem

    Ensure the domain Redirection - exception 1 domain does not work, but others do.   I tried all the common browsers with the same result. The login screen opens with this single IP address.  We use the platform for our Intranet so outside our internal IPS functionality is essential.  All solutions?   My number is 803-834-2111... email [email protected]

    Shared certificate is used in British Colombia.

    https://yoursite.worldsecuresystems.com would be your secure domain URL.

  • iOS Developer account - generator of App

    I just started working with DPS.  I have not committed to any project, but I'm at a point where she wants to confirm my iOS Developer Account.

    For exercise using the software, I have to commit to the $99 developer fee?

    Is there a certificate that allows me to develop without publication?

    You can develop folios and preview on your iPad or any other device using the free Adobe Content Viewer. If you want to build a custom test development application, you will need to register for the iOS developer subscription ($ 99 / year).

  • Oracle Linux Certification(1Z0-403)

    Hello, dear professionals,

    Yesterday, I spent exam 1Z0-403, with score of 92%, is there any certificate available for this review?

    Thank you in advance.

    If you have also passed the exam 1z0-042 (Oracle Linux Fundamentals) or any other certification, LPI, Linux +, Ubuntu, Red Hat or Novell, you will receive the Oracle administrator Linux Certified Associate certification.

    There is more information on this page: http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=149

    If you work for a partner of Oracle Corporation, you will also receive the designation of certified specialist of CAS.

  • Package of the plugin CS5 using the extensions Manager.

    I am trying to package the *.pln file and resource files into a single file *.zxp that we can give to customers.  I got this.  However, when the extension Manager installs the plug-in, it displays a warning that our extension is not signed.  This does not affect the installation, which is also successful if the user clicks to install it anyway, but it would be nice to have the plug-in signed so that the warning does not appear.  So, my question is (and I feel ridiculous to have to ask the question): How can I register our plug-in?  I downloaded Creative Suite signature toolkit and I read the documentation, and I see how packed up with the command:

    java-jar ucf.jar - package - stores PKCS12 - keystore myCert.pfx - storepass mypasswd myExtension.zxp - C ".» "/ myExtension.

    Where can I get the pfx files?  I buy a certificate from VeriSign (or CA comparable) and generate the the *.pfx the *.cer will they give me?  What kind of certificate to buy?  Should I go for an Authenticode certificate?  Who also works for our Mac plugin?  Do I need to buy a certificate for Windows and a single certificate for Apple?  I sign the plug-in itself, or simply the *.zxp file?  I sign the plugin package AND signatures in the *.zxp?  Are these questions I should ask VeriSign (or another CA)?  Or is it better to simply indicate to the customer that they receive our plug-in from us directly, they can ignore the warnings of signature?

    I'VE been on Google every day, but there is a ton of information out there regarding certificates (and most of it over SSL), so if someone wants to tell me a primer that will help me refine my questions, I understand that too.

    Yes. It's about the size of it. In my view, that GlobalSign is cheaper. Any compatible signature AIR will work.

    Also, as far as I KNOW, you only need zxp if there is a CS Extension in your package. If it's a straight plug-ins, you can use mxp that does not require a signature. Try using mxp without signature and see if you get warning...

    Substances

  • Is there a tutorial how to use certificates to protect a PDF of sharing/opening/printing it?

    I want to share a PDF file that should not be shared with others and can only be opened on a specific computer. No idea how to use certificates for this. Or are there other ways to do it?

    Thank you

    You can consult the help:

    Acrobat help. Securing PDF files with certificates

Maybe you are looking for