Talk:How to sign a .Sis file with Self-Sign Certificate

From Forum Nokia Wiki

Hello,

when I ran makesis it generated a .csr file instead of a .cer file. I successfully used this with signsis. What do these to file types relate to one another?

-John

C:\workspaces\FirstResponse\sis>makesis -version

MAKESIS Version 4, 0, 0, 5
A utility for creating Software Installation (SIS) files.
Copyright (c) 2000-2006 Symbian Software Ltd. All rights reserved.

error: unknown flag
Usage : MakeSIS [-h] [-i] [-s] [-v] [-d directory] pkgfile [sisfile]

  Options : -h Show help page
  Options : -d Specify a directory path to search
  Options : -i Show Open SSL licence
  Options : -s Generate a ROM Stub
  Options : -v Verbose output to screen
  use -h option to see pkgfile format

C:\workspaces\FirstResponse\sis>devices
S60_3rd_FP2_SDK:com.nokia.s60
S60_3rd_FP1:com.nokia.s60 - default

Are you sure that makesis created .csr file? Because "makesis" is used to create a .sis file from .pkg file. Just search in the SDK help for "makesis".
--Kiran10182 19:48, 12 June 2008 (EEST)

File extension would not necesarely matter

He probably means makekeys.exe but that still does not explain the issue. However, file extensions are irrelevant unless they are used to identify the file. If the content is OK (which probably it was) then you can still sign a sis file with a .cer file disguised as .csr

Ltomuta 08:17, 13 June 2008 (EEST)

Also please try with the Carbide C++ Sis Signer which is under Carbide menu... -Somenath

createsis

In S60 3rd Edition FP2 and possibly in older versions there is a useful wrapper script (\epoc32\tools\createsis.pl) which combines the steps listed in the wiki page.

To create self-signed certificate and sign a sis file in one step run

perl \epoc32\tools\createsis.pl create foo.pkg

The script will prompt you for a password because it encrypts the auto-generated the key.

If you already have a Symbian Signed key and cert you can use create sis to simplify the signing task

perl \epoc32\tools\createsis.pl -key mykey.key -cert mycert.cert create foo.pkg

Question ?

Hi, plz I did not understand the meaning of a good sign allication ? Is it the type of protection ? If this is true Can I use this method to sign my program (.java)? Thansk .

Mixing Carbide.C++ auto or manual SelfSigning

It has both carbide.c++ & manual signing process .
just that it does not make it distinct between both.

Self signing an application

"The step by step way of self-signing an application you have developed" is described in the mentioned article.

Signing is the process by which we can run our application on the mobile.An unsigned application will not able to access some sensitive functionalities of your device or may not even install on the device depending on the security settings installed by the manufacturer.

This article becomes very useful when you want to run your self-made apllication on your mobile.But you should always be careful that it should never be used for commercial purpose. To use it for the same, you are supposed to get it signed from Symbian. The symbian signed online portal currently resides at http://www.symbiansigned.com. You are supposed to register first.The complete guide to sign an application is given on the website.

This article is useful for both beginners and experienced developers.--Deepikagohil 12:17, 6 September 2009 (UTC)

Community: Wiki