Join Now
Quality Rating:
  • Currently 0.0 / 5
(0.0 / 5 - 0 votes cast)
Expertise Level:
  • Currently 0.0 / 5
(0.0 / 5 - 0 votes cast)

This page was last modified 10:52, 8 February 2008.

KIS000816 - Self-signed certificates expire after one year

From Forum Nokia Wiki


ID KIS000816 Creation date February 8, 2008
Platform S60 3rd Edition
S60 3rd Edition, Feature Pack 1  		Devices  
Category Symbian C++  Subcategory SDK & Tools, Signing and Certification 

Description

When creating self-signed certificates, the makekeys utility sets the expiry period to one year by default. After one year, SIS packages signed with this certificate can no longer be installed.

There is an updated version of the makekeys utility that allows changing the expiry period. However, this version is only part of S60 SDKs since 3rd Edition, Feature Pack 2.


Solution

When creating the private key and certificate used for self-signing, use a version of makekeys that recognizes the expdays command line parameter for setting the expiry period in days.

For example: 

 makekeys -cert -expdays 7300 -password secretpassword -len 2048 -dname
          "CN=Test User OU=Development OR=Company CO=FI EM=test@company.com"
          mykey.key mycert.cer


S60 3rd Edition, Feature Pack 2 SDK already has this version of makekeys.

For previous SDK versions, this version can be downloaded from the Symbian Web site.

Retrieved from "http://wiki.forum.nokia.com/index.php/KIS000816_-_Self-signed_certificates_expire_after_one_year"
 
Powered by MediaWiki