General-OS error with ReadDeviceData and ovi developer crt/key

[AlterX]

Hi,
i'm facing this error since ovi gives me new crt/key; they deep investigate about that without a resolution (valid crt/key for them and is only a QtCreator problem).
This is the situation:
if i use a QtCreator auto-generated UID3 and theese capability (with ovi publisher cert/key ):
TARGET.CAPABILITY += NetworkServices Location

All work and the app runs on the device.

Well...with the same above setting, if i ONLY add "ReadDeviceData" capability:
Executable file: 198809 2011-01-15T13:14:34 C:\NokiaQtSDK\Symbian\SDK\epoc32\release\gcce\urel\app.exe
Package: 2257316 2011-01-15T13:15:01 C:\Sviluppo\app\app.sis
Deploying application to 'Nokia N8-00 USB Serial Port (COM3)'...
Copying installation file...
Installing application...
Could not install from package C:\Data\app.sis on device: General OS-related error
Finished.

Nokia told me that i must use ovi UID given me for publishing, but if i do that, without/with using "ReadDeviceData" Capability i got the same error!
Before the the freshed crt/key (with the old ones) everything gone ok.

Please an help is urgent (i'm blocked by twenty days)
Thanks to all

Gianni

[Sorcery-ltd]

Using the auto-generated UID (which comes from a testing range for self-signing only) with the Ovi cert/key combination will not work. Using the Ovi UID with the generated cert/key (which are for self-signing) will not work. Using the Ovi UID with the Ovi crt/key will work. Using a self-generated certificate with a self-generated key will work but not with "ReadDeviceData".

If you've got as far as being blocked by 20 days on something this fundamental I'd suggest you go and spend a day reading all the Symbian Signed documentation and learn how to use makesis and signsis from the command line, so you can be sure you're using the correct certificate and key!

I strongly suspect you have a user problem, not a Qt Creator problem - Qt Creator uses the UID you put in the .pro file and the certificate and key you specify (in Projects -> Build Steps -> Create SIS Package (check "Custom certificate" and enter select the files you've been given by Ovi).

You can use signsis to remove the signature Qt Creator has added and then re-sign to double check!

You can also use the Developer Certificate Contents tool:
http://wiki.forum.nokia.com/index.ph..._contents_tool
To make sure that the certificate Ovi have given you has the correct capabilities for your app and the IMEI of your device.

If it still doesn't work - install the generated (and signed) SIS file to your device manually (copy it to the device and open from the file manager) to see if you get a more useful error from the device. There are LOTS of guides to interpreting the cryptic messages from the installer out there.

[AlterX]

Using the auto-generated UID (which comes from a testing range for self-signing only) with the Ovi cert/key combination will not work. Using the Ovi UID with the generated cert/key (which are for self-signing) will not work. Using the Ovi UID with the Ovi crt/key will work. Using a self-generated certificate with a self-generated key will work but not with "ReadDeviceData".

If i use auto-generated uid with the ovi cert/key combination for me works!
If i use ovi uid with/without ovi cert/key combination doesn't work!

Before nokia gives me the new cert/key (due to expiration of the old ones), my project works with auto-generated uid and ov cert/key.
Using the new nokia cert/key my project without any changes doesn't work anymore!

[AlterX]

i've tried to install manually (copying the file to the device and then install it) and it gives me:
"impossibile installare un applicazione protetta da un fornitore non attendibile"
"impossible to install a protected application from an untrusted supplier" (it is a my translation)
That above with OVI cert/key and OVI UID

[Sorcery-ltd]

I would say your application is either NOT being signed with the Ovi cert/key, or there is something wrong with the cert/key that Nokia have given you.

That error means you're using a protected UID (the Ovi UID - not an auto-generated test range UID) and the certificate on the SIS file doesn't chain to one of the root certificates in the device. If it were a valid developer certificate you were signing with, then it would.

Take that SIS file and remove the most recent signature (with signsis -u) and manually re-sign it with signsis and the cert/key from Ovi. Then try to install it again.

Mark

[AlterX]

I would say your application is either NOT being signed with the Ovi cert/key, or there is something wrong with the cert/key that Nokia have given you.
That error means you're using a protected UID (the Ovi UID - not an auto-generated test range UID) and the certificate on the SIS file doesn't chain to one of the root certificates in the device. If it were a valid developer certificate you were signing with, then it would.
Take that SIS file and remove the most recent signature (with signsis -u) and manually re-sign it with signsis and the cert/key from Ovi. Then try to install it again.
Mark

I try what you asked me.
Step 1: QtCreator compilation with OVI UID and OVI developer cert/key
Step 2: signsis -u app.sis app_unsign.sis
Step 3: signsis -s app_unsign.sis app_sign.sis Ovi.crt Ovi.key
Step 4: i copied it on the device and i tried to install it
same error untrusted supplier.

Anyway i'm waiting for nokia to respond me about that error.
My only dubt is: i've 4 OVI UID and maybe nokia has created a cert/key only for some UID that i'm not using here?!

[Sorcery-ltd]

Unless they have some tool I don't know about, the developer certificate creation process doesn't currently allow restricting to specific UIDs (although the certificates can theoretically contain such restrictions and the installer enforces them).

It's more likely that there's some other problem. Examine the certificate the the developer certificate contents tool I linked above.

Do Ovi give you a root certificate to install for their certificates by any chance (I've not gone through this myself yet). If so I'd say that's changed/missing.

[AlterX]

Unless they have some tool I don't know about, the developer certificate creation process doesn't currently allow restricting to specific UIDs (although the certificates can theoretically contain such restrictions and the installer enforces them).
It's more likely that there's some other problem. Examine the certificate the the developer certificate contents tool I linked above.
Do Ovi give you a root certificate to install for their certificates by any chance (I've not gone through this myself yet). If so I'd say that's changed/missing.

If i use devcertlist :
STOPPING Failed to find extension field for IMEI's - is this a Symbian devcert? Failed to find extension field for Capabilities field - is this a Symbian devcert?

I hit double click on the crt, under win, and it gives me information about it (on general tab):
The integrity of this certificate cannot be guaranteed.
The certificate may be corrupted or may have been altered.

Within "certificate status" of "Certification path" tab, it gives me:
This certificate has an invalid digital signature.

Thanks
Gianni

[Sorcery-ltd]

Sounds like the certificate file is corrupt then. Can you re-download it from Ovi, or get someone to resend it?

[AlterX]

Sounds like the certificate file is corrupt then. Can you re-download it from Ovi, or get someone to resend it?

I must request it via nokia ovi. i'll send the request..

[mstream]

AlterX
Have you been able to solve the issue?
I'm having exactly the same problem with exactly the same error message. I contacted Nokia OVI on that issue 5 days ago but have not heard anything from them yet.