S60 Signing and Certification

[vasant21]

hi all good people,


There is straight forward question for you.

Does the two options for autostarting application ( or exe ) in 9.1 ( 3rd edition) comes under Non-Public API.


1 ] Recognizer
2 ] Startup API


Does it means that we do not have access to this capability?
Does it means that i cannot autostart my application in 9.1 without symbian signing?

Does it means that we will not be able to autostart application with selfsigned certificates?

Have your views.
Waiting for replies..
Thanks.
-vasant

[khurshed79]

Yes (unless an operator has restricted the phone to only signed apps). The setting to allow unsigned apps (All) or only signed apps is in the Application Manager (Options > Settings).

In other words, application signing is not mandatory on current S60 3rd Edition devices (or Symbian 9 in general).

Hi,

I confirm that applcation without signing does not work on S60 3rd edition devices. In Application Manager, (Options->Settings), I changed the Software installation to -> All. Then I tried to install an unsigned app, it didn't work. So signing is mandatory in S60 3rd edition devices

[antonypr]

Yes, I think it is mandatory in S60 3rd Edition -> at least from all the devices that I have ever used.

There is even worse situation in some countries because the operators allow installation of signed application from Symbian Signed only. Even application signed with self-signed certificate will not work.

Read also my blog post, http://mobile.antonypranata.com/2006...ymbian-signed/.

Antony

[lenclud]

Hi,

I have to install multiple EXEs in one SIS. Actually 4 of them.
One is an application and 3 are servers. If I remove all the servers binaries from the SIS the install succeed. With the servers I'm getting the 'Unable to install' error message at the very end of the installation process. I'm using a DevCert and protected UIDs. Since the installation succeed with only the application EXE I tried changing the UID configuration in the servers EXE/MMP:

-UID 0 + No SECUREID => 'Unable to install'
-UID 0 + individual SECUREID for each server => 'Unable to install'
-UID 0 + SECUREID from the application => 'Unable to install'
-UID 0 0xappsecureid + SECUREID from the application => 'Unable to install'

I was using a N91.
What's the right thing to do here? I'll try harder I guess.
Surely since your PKG/SIS/APP(exe) UID is associated with the set of capabilities defined in the certificate all EXEs in the SIS should use the same SECUREID if they want to use those capabilities? Am I missing something?

Cheers,
S.

[lenclud]

My bad I forgot to do reallyclean It works with each EXE having their own UIDs. So you have something like that in the MMPs:
UID 0 0xMyProtectedUid
SECUREID 0xMyProtectedUid

[alexs@servision.net]

There is some application for S60 v3 that installs without cerificates.
While installation you see some message that application is not trusted and thats about all.
f.e.
http://sourceforge.net/projects/s2putty/
how its possible?Application clearly uses network services...
Thanks

[antonypr]

That application (s2putty) is actually self-signed application.
It is signed with a certificate generated by developers.
Since S60 doesn't recognize the certificate, it says the application cannot be trusted.

Antony

[alexs@servision.net]

fine with me
that means i can create self signed application that uses some capabilities such as NetworkServices without all this burocracy with SymbianSigned and certificates?
May be you can provide me with some link where such proccess described?

[petrib]

Self-signing happens automagically, if you use Carbide.c++

[antonypr]

Self-signed certificate can only be used to sign applications with LocalServices, Location, ReadUserData, UserEnvironment and WriteUserData. If you need capabilities other than those, you need to apply for Symbian Signed certificate.

This link may be useful for you, http://www.s2.org/~pekangas/creating...tificates.html

Antony

[SlonUA]

Device: Nokia E50-1
OS: Symbian 3rd ED futured pack 1 (aka v9.1)

During instaling JAR App (J2ME) after ~80% i had a error "Unable To Install" !!!

The problem is ... that Installer have a bug, i think so !!! Than U install JAR from Internet by JAD and connection is lost, installation is interapted AND U are in trouble !!!
After this U can't install any more JAR and can't see in APP.Manager Ur allready installed JARs (few still are)

Do u know this !?! Do U know which files are responsyble for that !?!
Any ideas =) ???

One more thing .. i found file Z:\System\swipolicy.ini

AllowUnsigned = false ***IT'S MY NOTES - THERE I MUST CHANGED IT. IN APP.Manager - INSTALL ALL IS SET TO TRUE - END OF MINE***
MandatePolicies = false
MandateCodeSigningExtension = false
Oid = 1.2.3.4.5.6
Oid = 2.3.4.5.6.7
DRMEnabled = true
DRMIntent = 3
OcspMandatory = false
OcspEnabled = true
AllowGrantUserCapabilities = true
AllowOrphanedOverwrite = true
UserCapabilities = NetworkServices LocalServices ReadUserData WriteUserData UserEnvironment
AllowPackagePropagate = true
SISCompatibleIfNoTargetDevices = false
RunWaitTimeoutSeconds = 600
AllowRunOnInstallUninstall = false
DeletePreinstalledFilesOnUninstall = true

[SlonUA]

Device: Nokia E50-1
OS: Symbian 3rd ED futured pack 1 (aka v9.1)

During instaling JAR App (J2ME) after ~80% i had a error "Unable To Install" !!!

The problem is ... that Installer have a bug, i think so !!! Than U install JAR from Internet by JAD and connection is lost, installation is interapted AND U are in trouble !!!
After this U can't install any more JAR and can't see in APP.Manager Ur allready installed JARs (few still are)

Do u know this !?! Do U know which files are responsyble for that !?!
Any ideas =) ???

One more thing .. i found file Z:\System\swipolicy.ini

AllowUnsigned = false ***IT'S MY NOTES - THERE I MUST CHANGED IT. IN APP.Manager - INSTALL ALL IS SET TO TRUE - END OF MINE***
MandatePolicies = false
MandateCodeSigningExtension = false
Oid = 1.2.3.4.5.6
Oid = 2.3.4.5.6.7
DRMEnabled = true
DRMIntent = 3
OcspMandatory = false
OcspEnabled = true
AllowGrantUserCapabilities = true
AllowOrphanedOverwrite = true
UserCapabilities = NetworkServices LocalServices ReadUserData WriteUserData UserEnvironment
AllowPackagePropagate = true
SISCompatibleIfNoTargetDevices = false
RunWaitTimeoutSeconds = 600
AllowRunOnInstallUninstall = false
DeletePreinstalledFilesOnUninstall = true

RESOLVED !!!
http://discussion.forum.nokia.com/fo...061#post256061

[otsokas]

All beginner 3rd Edition developers, please note that
the "Self Signed Certificate" is a very easy option for getting
your simple 3rd Edition applications signed & installed to the phone!

Self-signed certificates are NOT well documented in Symbiansigned.com's
official help documents! (This means the PDF files that you can download
from Symbiansigned.com.) The PDFs talk a lot about "developer certificates"
but they are misleading. Because, in many cases, a self-signed
certificate is just OK and self-signing also works very easily.

So, if your application doesn't use any capabilities, you can make
your own certificate with a program called "makekeys".
Yep, there's no communicating with Symbiansigned.com authorities,
and you can do the self-signed certificate on your own local computer
yourself.

Why did I post this message? Because I spent 2 full days
figuring out, why on earth I have to get a "developer certificate"
from Symbiansigned.com for a 3rd Edition HelloWorld application...
(The answer is, of course, that I didn't need a developer certificate,
because a self-signed certificate is completely OK.)
Please see relevant documentation in your
<SDK_path>\S60Ex\_doc\creating_sis.htm

Hope this helps someone who had the same problems with
3rd Edition certificates as I had,

best regards

[antonypr]

Also note that we have a page about how to signing on Forum Nokia Wiki (http://wiki.forum.nokia.com/index.ph...ing_sis_files).

I have added a flowchart there; explaining which certificate to use during production and development as well as using developer certificate or self-signing certificate.

Hope this page helps.

Antony

[pharoah90]

I have certificate error while my fren dont.. Doest is mean it is just with my phone? and i am using 3250.. Anyway, i cant enter the url given to view this problem..