I tried what you said, and for the first time the phone accepts
something! Only thing is that it gives me 2 messages when I check the
status of the certificate:
1. no name for it
2. expired. The phone says the expiry date is wed 0/0/00.
Instead of generating a new certificate, I used one I generated a week a
ago. It has been some time since I last used openssl and maybe the
version I have is old or I incorrectly generated the certificate. Did I
do something wrong?
I have atached a copy of the certificate I uploaded to the phone - maybe
you can kindly tell me where I have gone wrong. I have changed the
extension of the attached cert to .txt as the openssl forum does not
accept .crt.
Thanks for your great tip! I am now 90% there!
RGDS,
David
Dr. Stephen Henson wrote:
On Tue, Jul 12, 2005, David Templar wrote:
Hi all,
I am really stuck and have tried all I can - I really need your help to
generate a software publishing certificate and its root cert to install
on motorola phones.
I am enclosing a copy of an already existing cert on the phone. It
appears to be a V4 x509 cert - I could be wrong though. The phone does
not seem to accept any certificates I have currently generated. Someone
said to delete the first 2 octets, using that I can read the file now,
but how do I generate a certificate like it?? The certificate is called
motman.crt, but I have attached it as motman.txt as the openssly posting
does not allow .crt extensions.
Its V3 X509 with two additional bytes prepended. IF you want to generate it
just take a DER format file and prepend the same bytes.
However there may not be a solution to your problem. I know of a couple of
phones that deliberately have no way to add new CA certificates.
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]