Signing

Yesterday I was reading the book "Symbian OS Platform Security" de 
Wiley, and in the chapter 2 it says that an application can be installed 
on a mobile phone witouth have been signed... I have tried it, 
installing a sis without any sign in a Nokia E60, being disabled 
previously in appmanager all security and it doesn't work (it prompts 
certificate error, contact supplier). Has an application to be signed to 

"Felix Garcia" <fgarcia@mystrands.com> wrote in message 
news:dpSTSetQHHA.6124@UKCOL01WWEB01.symbian.intra...
> Yesterday I was reading the book "Symbian OS Platform Security"
de Wiley, 
> and in the chapter 2 it says that an application can be installed on a 
> mobile phone witouth have been signed... I have tried it, installing a sis

> without any sign in a Nokia E60, being disabled previously in appmanager 
> all security and it doesn't work (it prompts certificate error, contact 
> supplier). Has an application to be signed to be installed?

On S60, apps *must* be signed in some way: Symbian Signed, self-signed, 
signed with a devcert.


-- 
Sander van der Wal
www.mBrainSoftware.com 

Sander van der Wal wrote:
> "Felix Garcia" <fgarcia@mystrands.com> wrote in message 
> news:dpSTSetQHHA.6124@UKCOL01WWEB01.symbian.intra...
>> Yesterday I was reading the book "Symbian OS Platform
Security" de Wiley, 
>> and in the chapter 2 it says that an application can be installed on a

>> mobile phone witouth have been signed... I have tried it, installing a
sis 
>> without any sign in a Nokia E60, being disabled previously in
appmanager 
>> all security and it doesn't work (it prompts certificate error, contact

>> supplier). Has an application to be signed to be installed?
> 
> On S60, apps *must* be signed in some way: Symbian Signed, self-signed, 
> signed with a devcert.
> 
> 

Felix Garcia napisał(a):
> Sander van der Wal wrote:
>> "Felix Garcia" <fgarcia@mystrands.com> wrote in message

>> news:dpSTSetQHHA.6124@UKCOL01WWEB01.symbian.intra...
>>> Yesterday I was reading the book "Symbian OS Platform
Security" de 
>>> Wiley, and in the chapter 2 it says that an application can be 
>>> installed on a mobile phone witouth have been signed... I have
tried 
>>> it, installing a sis without any sign in a Nokia E60, being
disabled 
>>> previously in appmanager all security and it doesn't work (it
prompts 
>>> certificate error, contact supplier). Has an application to be
signed 
>>> to be installed?
>>
>> On S60, apps *must* be signed in some way: Symbian Signed, 
>> self-signed, signed with a devcert.
>>
>>
> 
> And how can I self-sign an application to be installed on any mobile
phone?

Self-signing means that sis is signed by you using self generated 
certificate(the opposite to symbian-signed where symbian certificate is 
used). Easiest way is to invoke createsis without parameters like:

createsis create myapp.pkg

then you will be prompted to enter password for key file and generate 
some random data by moving mouse over console and pressing keys, this 
data will be used to create your certificate and key, next you can use 
this cert+key pair to sign any other sis(after that process you have two 
  new files: certificate - cert-gen.cer and key - key-gen.key)

Again easiest way to create self-signed sis (from pkg) using existing 
cert and key file.

All process is correct, but when I am installing it, a messae like that 
apper : "Unable to install a protected application of an untrusted
supplier"

Sebastian Wieczorek wrote:
> Felix Garcia napisał(a):
>> Sander van der Wal wrote:
>>> "Felix Garcia" <fgarcia@mystrands.com> wrote in
message 
>>> news:dpSTSetQHHA.6124@UKCOL01WWEB01.symbian.intra...
>>>> Yesterday I was reading the book "Symbian OS Platform
Security" de 
>>>> Wiley, and in the chapter 2 it says that an application can be

>>>> installed on a mobile phone witouth have been signed... I have
tried 
>>>> it, installing a sis without any sign in a Nokia E60, being
disabled 
>>>> previously in appmanager all security and it doesn't work (it 
>>>> prompts certificate error, contact supplier). Has an
application to 
>>>> be signed to be installed?
>>>
>>> On S60, apps *must* be signed in some way: Symbian Signed, 
>>> self-signed, signed with a devcert.
>>>
>>>
>>
>> And how can I self-sign an application to be installed on any mobile 
>> phone?
> 
> Self-signing means that sis is signed by you using self generated 
> certificate(the opposite to symbian-signed where symbian certificate is 
> used). Easiest way is to invoke createsis without parameters like:
> 
> createsis create myapp.pkg
> 
> then you will be prompted to enter password for key file and generate 
> some random data by moving mouse over console and pressing keys, this 
> data will be used to create your certificate and key, next you can use 
> this cert+key pair to sign any other sis(after that process you have two 
>  new files: certificate - cert-gen.cer and key - key-gen.key)
> 
> Again easiest way to create self-signed sis (from pkg) using existing 
> cert and key file.
>