问题标签 [self-signed]

我想为我的本地开发服务器拥有一个自签名 SSL 证书。我按照https://help.ubuntu.com/community/OpenSSL上的指南进行操作，最后一步是通过发出以下命令发出命令来签署证书：

我收到以下错误：（最后一行）

我能做些什么来解决它？只是作为背景，我的服务器没有域名，所以我只是使用 localhost 作为 commanName。那是问题吗？

谢谢你的帮助。

我已经创建了自签名证书并配置了 tomcat 以使用它（端口 443）

当我尝试通过 j2me 应用程序访问它时，我得到 CertificateException

javax.microedition.pki.CertificateException：证书验证失败

我认为模拟器可以选择导入证书，但是有没有办法将证书与 j2me jar 打包并使其接受真实移动设备中的自签名证书。

我使用 keytool 的 -validity 属性生成密钥库并自签名 jar。在此过程中，我看到调试消息说

我正在使用以下命令，

我在这里做错了吗？实际上我想用证书在罐子上签名 1 年。

干杯，J

I programmed a small app for iOS, and I used Mac OS X 10.6.6, Xcode 3.2.5 and iOS SDK 4.2, all running in a Virtual Box machine 4.0.

now I want the app to run on my iphone and to distribute it to some beta testers. because I'm not a registered apple developer and I don't want to pay $99 to apple, I need to find some other way.

the first thing I found on the net is the tutorial of alex whittemore: alexwhittemore.com

I followed the instructions by creating a self sign root certificate,binary patching the Xcode program and adding some scripts to the build process. afterwards, I switched to from "debug" to "release" mode and from "simulator" to "device". the build-process ends with a warning-message:

Application failed codesign verification. The signature was invalid, or it was not signed with an Apple submission certificate. (-19011)

but I still have a appname.app folder in the Release-iphoneos-folder, which I can transfer via ssh or scp in the /Applications/-folder of my jailbroken iphone. afterwards I call "uicache" on the iphone and the app is shown in springboard. I can also start the app and everything works fine.

now is the problem, that I want an IPA file of my app. as I read on the net, an IPA file is nothing more than the appname.app folder in a folder called "Payload", zipped together with two files called iTunesArtwork and iTunesMetadata.plist. I created the iTunesArtworks file out of an 512x512 jpeg image and the plist file from some preset I found on the net. afterwards, the appname.zip file has to be renamed to appname.ipa. I did this process manually and transfered the IPA file via scp to the download-folder of my installous-app on my iphone. then I started installous and tried to install my app - there comes the error message:

installation failed: invalid ipa

I did a search on the net for this error message and found something about updating my Appsync and Installous-installation. I updated both programs from the hackulo.us-repository, but this didn't help.

so I thought, that I did something wrong during the IPA-creation-process. I did some research and found out, that it is possible to drag and drop the appname.app-folder to itunes, which automatically makes an IPA file of it. then you can find the IPA file in some folder of iTunes. I copied this file to the download folder of installous on my iphone and tried to install this file again, but the same error message is shown.

my question: how can I make a valid IPA file for installous, if I have a self-signed app? does installous check the signature?

maybe someone has a hint for me...

EDIT:

I found a solution for my problem.

because I wanted more information on the installous-error-message, I installed "syslog toggle" and "syslogd to /var/log/syslog" via cydia on my iphone to log detailed information to /var/log/syslog. then I tried to install the IPA file again and I got a message in the syslog from the installd daemon, that the IPA file has a minimum-iOS-version requirement of 4.2, while my iphone is running under iOS 4.0.

*installd[163]: 00503000 verify_bundle_metadata: The system version is lower than the minimum OS version*

interessingly there was no problem to install the app as system application by copying the appname.app-folder via ssh to /Applications/, but with the wrong minimum-iOS-version-parameter build in. so I rebuild my app with the right minimum-iOS-version for my iphone.

I tried to install again, but again I got an error message about an invalid IPA. this time the installd daemon tells me in the syslog of my iphone, that it couldn't install an system application:

*installd[193]: 00503000 preflight_application_install: Can't install System or Internal apps*

this problem was easy to solve, because I still had the app installed as system application in /Applications/. I just needed to delete the /Applications/appname.app folder and call "uicache" twice with the user "mobile" via ssh. then I startet installous again and tried to install my IPA file - et voila: IT WORKED!!

maybe I was able to help someone with a similar problem. it seems to be a good idea to install the syslog-apps via cydia to have a closer look for the error messages of installous, if some generic error message like "invalid ipa" appears.

ps: I was really irritated, that my question was closed by the moderator! just because someone thinks, that my question is "not generally applicable to the worldwide audience of the internet." it's soooo stupid to close questions! now you see: I got a solution and I posted it here.. maybe it will help someone in the future! you shouldn't make the same fault as wikipedia by over-controlling the user content.

我创建了一个小型 j2me 应用程序（供个人使用）来发送短信。这个 j2me 应用程序从我的 HTTP 服务器获取消息，然后将它们发送到获取的手机号码。现在的问题是它每次发送消息时都会请求许可，据我所知，我需要签署我的应用程序以获得永久许可。我不想购买证书只是为了我个人使用。所以我决定对我的应用程序进行自我签名。我关注了这个博客http://browndrf.blogspot.com/2006/06/build-and-install-singed-midlet.html 但无法在我的手机上安装.cer（三星GT-S5230)。

我不知道是否有任何可用的 Eclipse 插件。

有没有其他简单的方法来自签名 j2me 应用程序。

我有一些 Eclipse 插件是功能的一部分。我们希望在更新站点更新时对这些插件应用代码签名。

导出单个插件时，我可以看到 JAR 签名选项卡，但在我的更新站点项目设置中看不到任何类似内容。

此外，我阅读的教程使用的是自签名证书。谁能指出我使用 Verisign 证书（即 *.pfx 文件）的说明？

任何人都可以帮忙吗？

谢谢，艾伦

编辑：我已将凯恩的回复标记为答案，因为它与我采取的步骤非常相似并且是一种灵感。我实际上是按照这些说明对 jar 进行签名，因为它基于 pfx 文件：https ://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=1072

步骤 1：运行以下命令以查看有关证书的详细信息（将文件名替换为您自己的文件名）：

第 2 步：滚动到输出顶部并记下别名值。

第 3 步：使用以下命令对每个 jar 文件进行签名（将文件名和别名替换为您自己的）：

我现在需要想出一种管理/自动化流程的方法。

我尝试像这样在 C# 中使用 Bouncy Castle 创建自签名 x509 v3 证书

但是当我尝试使用证书签署文件时出现问题

RSA 为空，因此证书似乎不正确

我为 localhost CN 创建了一个自签名 SSL 证书。正如预期的那样，Firefox 在最初抱怨它后接受了这个证书。然而，Chrome 和 IE 拒绝接受它，即使在将证书添加到受信任根下的系统证书存储区之后也是如此。即使当我在 Chrome 的 HTTPS 弹出窗口中单击“查看证书信息”时，证书被列为正确安装，它仍然坚持证书不可信。

我应该怎么做才能让 Chrome 接受证书并停止抱怨它？

我使用以下 TrustManager 在我的 Java 应用程序中接受来自本地测试服务器的自签名证书：

我对此有一些安全问题，因为据我所知，它只接受所有证书。所以我问自己是否有办法只接受来自 localhost 端口 9443 的证书？

我正在尝试从 Flex 4.5 应用程序通过 SSL（自签名）连接到 AMFPHP。这行得通吗？还是我需要一个权威签名的证书？它会像在浏览器中那样静默失败或提示用户吗？我需要如何编辑 services-config.xml 文件才能使其正常工作？

谢谢你。