What certificate should be installed in the terminal in order to verify the signature in a JAD?
• The CA certificate (trust anchor) is always installed in the terminal (or SIM or SWIM card). The JAD itself contains a signature over the JAR as well as the signer certificate corresponding to the private key that was used to generate the signature. In order for the signature verification to work, the signer certificate must be issued by a CA for which the CA certificate is installed in the terminal (or on the SIM or SWIM card). If a CA certificate available to the terminal is not a direct issue of the signer certificate, the JAD must include a certificate chain that chains up to a CA certificate available to the terminal.
Related Questions
- After I have installed my new Verisign Global ID server certificate, the browsers complain that they cannot verify the server certificate?
- What certificate should be installed in the terminal in order to verify the signature in a JAD?
- How to verify Database Console is installed and configured under oracle_home?
