CA root cert import to a 3650

Hi,


Is it possible to import a private Root CA certificate into the 3650 over HTTP? I pretty much tried the normal tricks (format PEM/DER) and extensions (.pem, .der, .cer, .crt, .ca) but it the phone either states that the format is unknown or shows it as text. Has anyone had success with this?

It would be nice if somebody could shed some light on this...

[Baggis]

I assume you are using the right MIME-types? Or is it that something which works on another phone doesn't work on the 3650?

Tried with the usual "application/x-x509-ca-cert" which works fine when dumping certs to workstations. Should I use something else as mime type?

[ivomir]

I can import CA-root certificate on 3650 too. What software i must use?

[Baggis]

Originally Posted by kajtzu

Tried with the usual "application/x-x509-ca-cert" which works fine when dumping certs to workstations. Should I use something else as mime type?

According to Nokia the certificate MIME type supported by many, if not all, of their WAP phones is:

application/vnd.wap.wtls-ca-certificate

Uh, yup. Seems to document it. However it just shows the x.509 root ca cert instead of giving a choice of importing it.

http://www.forum.nokia.com/main/1,35452,1_1_25_45,00.htm

Some documents seem to indicate that one would need to use a binary format (DER?) instead of the normal base64 text PEM -format. PEMs show up as text, DERs get flagged as an unknown format.

[Baggis]

Hmm... Well, certificates are not what I do evey day, hehe. Have you seen the "Nokia WAP Phone Security v3.0" document on page "http://www.forum.nokia.com/main/1,35452,1_1_15,00.html#xhtml"? If not, look at section 3.4 which talks about WTLS vs. X.509v3 certs. Seems WTLS certs which are binary should work on all handsets, while X.509 is only supported on Series 60 and 92XX.