Help installing root certificate on E50

O

O8SERVER IV

New member
Hi.

I'm having trouble installing an equifax root certificate onto my E50. I used a Mac to transfer the .cer file via bluetooth. The user's guide and phone help simply state that I should select a certificate file and save. However, when I open the .cer file using the filemanager, it opens as a note and selecting "save" results in an "Attachment saved" message and nothing else. I don't see anything in the Personal Certificates area of the Certificate Manager after that. What could be the problem?

Thanks.
 
I suspect it's possible that when you downloaded the .cer file, your Mac auto-added a .txt extension to it. You can make the Finder show ALL extensions (highly recommend) in the Advanced section of its preferences. If indeed it is there, remove it and Bluetooth it back over again.

I have successfully Bluetooth'd .cer files to my E61 which has happily imported them consistently.
 
You might also make sure the cert didn't get corrupted somehow; on your Mac, open a terminal window. Change to the folder where the cert is (let's say it's called "foobar.cer") and run this command:

Code: 
openssl x509 -text -in foobar.cer
This should print out a textual representation of a cert, which is basically verifying it's a good encoding. For instance if I run it on the CAcert root (http://www.cacert.org/certs/root.crt) is starts out like:

Code: 
$ openssl x509 -text -in cacertroot.crt
Certificate:
?? ?Data:
?? ? ? ?Version: 3 (0x2)
?? ? ? ?Serial Number: 0 (0x0)
?? ? ? ?Signature Algorithm: md5WithRSAEncryption
?? ? ? ?Issuer: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing Authority/[email protected]
If this part works with your Equifax or whatever cert, you can at least be assured the file is proper and *should* work on the Nokia.
 
I've tried that with 4 certificates, two regular and two CA's and get the same message for each:

unable to load certificate
1276:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:642:Expecting: TRUSTED CERTIFICATE
 
The cert seems to be good. I saw the expected output when issuing the openssl command. I even tried changing the extension from .cer to .crt and sending it, but no difference. Opening the file on the phone results in only seeing the "Begin Certificate/End Certificate" section in the Notes app.
 
OK I found a page that might help -- it appears that the S60 can't import a PEM, only a DER format cert (how lame). Check out the other tips here:

http://s60.blogg.se/211106103129_certificate_installation_in_s60.html

I just tried installing the raw cert(s) from CAcert.org and it fails in the normal Web browser. In the Services browser it also fails but at least goes further. I downloaded the .der file, copied it to the memory card then opened it in the file manager -- installed!

What a pain in the a** there Nokia, good job. Talk about painful.
 
Back
Top