03.01.2013 Views

Chapter 1

Chapter 1

Chapter 1

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The way the Certificate Generator works is to create a public/private key pair, which are then<br />

used by the Installation File Generator (makesis) to create a digitally signed and secure<br />

installation file.<br />

The private key must be kept secret and is generated straight away, along with a self-signed<br />

certificate containing information for its corresponding public key. The self-signed certificate<br />

is then used to create a certificate request, which you submit to a Certification Authority in<br />

order to get the public key – an authenticated digital certificate that is made generally<br />

available. The private key and the authenticated certificate should then be referenced in the<br />

package file used for creating the<br />

.sis file.<br />

You cannot decrypt one key without the other, which means that nobody apart from you<br />

(who has the private key) can change the .sis file without this being noticed by the installer<br />

software, which will alert the user to this fact.<br />

To create a private key for our HelloGUI application, type the following from the command<br />

line:<br />

makekeys -cert -dname "CN=Symbian OR=Symbian Ltd CO=GB"<br />

Hellogui.key Hellogui.cer<br />

The -cert flag specifies that a certificate is to be created, and the -dname flag introduces<br />

the following distinguished name string that is passed to the Certificate Generator. Within<br />

that string:<br />

CN supplies the common name for the vendor<br />

OR supplies the organization name of the supplier<br />

CO supplies the country of origin.<br />

Hellogui.key is the name for the private key, which will be generated in the<br />

current directory.<br />

Hellogui.cer is the name for the self-signed public certificate, which is also<br />

generated in the current directory.<br />

Note<br />

One thing to note is that the Certification Generator uses a mouse input<br />

mechanism to generate the private key. The MS-DOS property QuickEdit<br />

must be turned off in order for sampling of random data from the mouse to<br />

work.<br />

The next section describes how to obtain the public key, but if you want to continue with the<br />

next step in the process straight away, go to Producing the package file.<br />

Obtaining the public key<br />

After creating the self-signed certificate, you are able to produce a certificate request using<br />

makekeys again:<br />

makekeys -req -dname "CN=Symbian OR=Symbian Ltd CO=GB"<br />

Hellogui.key Hellogui.cer Helloguireq.p10<br />

The only changes are the use of the -req option, which specifies that a certificate request is<br />

to be created, and the additional name for the request file, which is again generated in the<br />

current directory.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!