Welcome to the Official BlackBerry® Support Community Forums. This is your resource to discuss support topics with your peers, and learn from each other. New to the forum? Please visit the ‘Getting Started’ link below.
inside custom component

Java Development

Reply
Developer
cagdasgerede
Posts: 241
Registered: 11-20-2008

Sending null TLS client certificate

I am talking to a server with TLS. I added TLS certificate for the server to the keystore.

 

However, every time I try to connect to the server my blackberry complains that there is no client certificate.

 

I do not have a certificate for the client. I am told that I should send a null certificate to the server.

 

Any ideas how to send a null certificate or something along these lines?

Please use plain text.
Developer
Posts: 1,474
Registered: 04-14-2009

Re: Sending null TLS client certificate

By default no client certificate is sent during the TLS/SSL handshake. I suspect the issue you are seeing is caused by the server complaining that there was no client certificate sent. Check whether that's the case or not. You can, for example, connect using another TLS/SSL client, such as your web browser to the host:smileytongue:ort of the server and see whether the TLS/SSL handshake succeeds or not.

Please use plain text.
New Contributor
AndrewDover
Posts: 3
Registered: 09-30-2010

Re: Sending TLS client certificate

Is there any way to use TLS with Client certificate authentication from a program on the Blackberry?

 

I note that the browser has the option of configuing client certificates:

http://docs.blackberry.com/en/smartphone_users/deliverables/1487/TLS_options_29082_11.jsp

 

But http://www.blackberry.com/developers/docs/4.7.0api/javax/microedition/io/Connector.html#https does not show any way to achieve the mode in which the client has a certificate and private key and the server then trusts the client.

 

So far, my best option seems to be to try the PureTLS.   http://www.rtfm.com/puretls/ 

 

thanks Andrew

Please use plain text.