Allowing Opera a download with incorrect system date
-
mbaier last edited by
Hallo. I can't download our Java App over the Opera browser when I have changed the system date manually because the Opera browser tells me "Failed to connect to the Internet. Please check the date setting in your device.". I need to change the system date to an earlier date because the certificate of the app has expired and I can't renew it because the CA's don't deliver SHA1 certificates anymore. SHA2 certificates are not supported on these old nokia devices. Devices with this behavior are e.g. Nokia 301, Nokia 206, Nokia 2700c and many more! What should I do? Our customers can't download our software anymore!
-
jmwking last edited by
You could remove the SHA1 certificate entirely from the Java App. It no longer serves any purpose.
-jk
-
-
mbaier last edited by
Isn't there any option to download an app with expired certificate with the opera browser? We can not expect from our customers to download an unsigned Version. They would have to confirm security warnings all the time!
-
-
jmwking last edited by
SHA1 has been thoroughly broken and since deprecated. All the reputable browsers and sites have stopped supporting it.
-
mbaier last edited by
Yes SHA1 is deprecated. Thats true. But SHA2 isn't supported so we have no other choice. It was possible to install our app with any other browser. Now the browsers were replaced by the opera browser over a forced update on all Nokia devices . This opera browser blocks the download because of an incorrect System date and prevents so a solution. Is it really not possible to allow such an download with an security setting e.g.? I can't believe it.
-
jmwking last edited by
I understand how difficult this is for you. But there really shouldn't be a good way to use SHA1 - that's how systems get compromised.
Delivering an insecure app probably should entail clicking endless security warnings; it's not secure!
-jk
