Related
Hi,
I am trying to sign some dlls with the SDKSamplePrivdeveloper certificate and I have alaways the same error : errorcode 0x80070057.
I use Visual Studio 2005 and Windows Mobile 2005 SDK. I tried with the wizard "signtool signwizard" and the prompt cmd "signtool sign /f SDKSamplePrivDeveloper.pvk my_dll.dll" ...
I tried also to build a cab, cab to install my dll, and when I try the cab on my Universal, I have the message "....can't be installed..."
Any help will be welcome
Thanks
Well, I understood where was my mistake... So now I have a new question : where can I found the password for the sdksampleprivdeveloper.pfx ?
Thanks
it does not have a password
thanks and sorry for my newbie questions. I understood that I had to import SDKSamplePrivDeveloper.cer first to my depository and after SDKSamplePrivDeveloper.pvk. FOr SDK....cer no issue but for SDK....pvk cermgr.msc asks me a password
Hi All!
I tried to sign my dll files. For the first time I sign a dll file that doesn't concern with ppc , cmd command :
"signtool sign /f SDKSamplePrivDeveloper.pfx satelite.dll"
It was success to sign, but when I tried to sign dll files that were dumped from PPC wm 2005 on Himalaya , command :
"signtool sign /f SDKSamplePrivDeveloper.pfx shellres.dll"
Done adding aditional store
Signtool error: Isigncode::Sign return error 0x80070057
The parameter is incorrect.
Signtool error; An error orrcurred while attempting to sign: shellres.dll
or:
"signtool sign /f SDKSamplePrivDeveloper.pvk shellres.dll"
Signtool error: IStore2::Load return error 0x80092009
Cannot find the request object
Signtool error; An error orrcurred while attempting to load the signing certificate from: SDKSamplePrivDeveloper.pvk
Can any one help me to sign these files?
I found this :
SYMPTOMS
Attempting to digitally sign a file using Signcode.exe results in the following error:
Unable to sign the program xxxxx: (0x80070057)
CAUSE
The current version of Signcode.exe that ships with the ActiveX SDK, Ms Authenticode(IE4) and MS Authenticode(IE5) tools is unable to sign 16-bit files.
RESOLUTION
One workaround is to wrap the 16-bit file in a .cab or a self-extracting executable, which can then be digitally signed using Signcode.exe.
Note that only the 32-bit version of Internet Explorer requires a digital signature; 16-bit Internet Explorer does not check for signatures, and should therefore be able to download an unsigned 16-bit file.
Click to expand...
Click to collapse
thanh_lam said:
It was success to sign, but when I tried to sign dll files that were dumped from PPC wm 2005 on Himalaya , ...
Click to expand...
Click to collapse
The files in "modules" directory are not normal EXE/DLLs - they are XIP! They would never work on real device without hand-editing. Most values in their PE-header are zeroed, all sections are joined into one, all DLLs don't have relocations section.
so, mamaich can you explain how sign dlls like was signed all the dlls on the last realVGA hack? I need to modify msim.96.dll to retreive an azerty keyboard ..
thanks
mamaich said:
it does not have a password
Click to expand...
Click to collapse
.pfx file is the pkcs#12 standard which containing the key pair in the file. YES, it is protected by a PIN (i called it PIN instead of a password). :wink: But I'm sorry I don't know the PIN :?
I found this program, easy to use and the Test Certificates work on both Smartphone and Pocket PC.
Just type sign filename.ext and it'll add/replace the digital signature at the end.
thanksssssssssssssssssssssss !
works great for a cab but not for my dll msimfr.192.dll (dumped from my qtek 9000 with buzz rom dumper)
BeyondtheTech said:
I found this program, easy to use and the Test Certificates work on both Smartphone and Pocket PC.
Just type sign filename.ext and it'll add/replace the digital signature at the end.
Click to expand...
Click to collapse
I've used it on EXEs and DLLs without a problem... CAB files, well, it doesn't matter since even with a re-signed CAB file, it still comes up as something "untrusted." What error message are you getting?
Same message :
Error: Signing Failed. Result = 80070057, (-2147024809)
Here is my dll :
BeyondtheTech said:
I found this program, easy to use and the Test Certificates work on both Smartphone and Pocket PC.
Just type sign filename.ext and it'll add/replace the digital signature at the end.
Click to expand...
Click to collapse
Mr Maimach sent these to me month ago. But I couldn't sign my files which were dumped form PPC WM5. As Maimach say these "modules" files haven't PE header, they are XIP file, and they no longer work in a real device.
When I edited these file in Visual studio 2005 (support unicode) and changed some strings form english to vietnamese, after that I save these files by save button, and when I edited these again, no change was made.
At This tIme I think these files were protected by MS, and they didn't allow us to change. But when I read this thread, the answer is clearly, these dll files were corrupted.
Can any one help me archive these dll files but not the XIP files?
So how do they do the last RealVGA Hack as all the dlls are signed ?
noone to help a poor newbie ?
I'm a very poor newbie too, I'm trying to make free Vietnamese Language package for WM2005, all things seem tobe done, but these problems make the life becomming difficulty . Until now no one can solve these, and hope in the recent days the solution will be fuzzzzzzzzzzzzzz
jpa said:
Same message :
Error: Signing Failed. Result = 80070057, (-2147024809)
Here is my dll :
Click to expand...
Click to collapse
As I've wrote several times before. All XIP DLLs produced by my tool would not work on real device. They don't contain relocs, and their PE-header is incorrect. You should manually set image size and other fields in PE-header, and don't forget to set the correct characteristics (the process is obvious if you know the PE format). Or here is a better approach - take any working resource-only DLL from your device, and place your resources into it.
BeyondtheTech said:
I found this program, easy to use and the Test Certificates work on both Smartphone and Pocket PC.
Just type sign filename.ext and it'll add/replace the digital signature at the end.
Click to expand...
Click to collapse
cool, good one..
THANX
buzz
Anyone know what files/have the files necessary to put the Java Virtual Machine back on the T-Mobile (US) MDA Load?
Its on the SDA but not the MDA - and this sucks!
Genesis3 said:
Anyone know what files/have the files necessary to put the Java Virtual Machine back on the T-Mobile (US) MDA Load?
Its on the SDA but not the MDA - and this sucks!
Click to expand...
Click to collapse
Just a simple .lnk file to \Windows\Jmm.exe. AFAIK, the intent Midlet manager comes with all HTC Wizards pre-installed; it's only the link file that is missing.
You can also download this link file from http://www.winmobiletech.com/sekalaiset/MIDlet Manager.lnk
Nope - the FILE is missing! And copying it over from a SDA (which has it) doesn't help - it won't run (may be different link options or somesuch)
It appears that T-Mobile whacked it out of their ROMs! Anyone got a copy of that I can try dropping in there?
Genesis3 said:
Nope - the FILE is missing! And copying it over from a SDA (which has it) doesn't help - it won't run (may be different link options or somesuch)
It appears that T-Mobile whacked it out of their ROMs! Anyone got a copy of that I can try dropping in there?
Click to expand...
Click to collapse
http://www.winmobiletech.com/sekalaiset/jmm.zip - give this a try. Unpack it to \Windows. Let me know if it works/doesn't work.
WORKS, kinda.
It comes up but won't load the GLM software. Not quite sure why.... looking at that now.
Update - says it failed to run image \windows\target.img
Looks like there's one file missing in that archive.
Genesis3 said:
WORKS, kinda.
It comes up but won't load the GLM software. Not quite sure why.... looking at that now.
Update - says it failed to run image \windows\target.img
Looks like there's one file missing in that archive.
Click to expand...
Click to collapse
Give it a try: http://www.winmobiletech.com/sekalaiset/target.img.zip
Put the ZIP file itself (don't decompress it) into \Windows.
Well it comes up now - GLM fails to load claiming the JAR file is invalid, but the Java Virtual Machine starts without error.
Genesis3 said:
Well it comes up now - GLM fails to load claiming the JAR file is invalid, but the Java Virtual Machine starts without error.
Click to expand...
Click to collapse
What JAR file is that? Midlet manager is only able to run non-device-specific midlets - that is, NOT Nokia/Sony-Ericsson etc. specific ones. With other stuff, it'll report about invalid JAR files.
Menneisyys said:
Genesis3 said:
Well it comes up now - GLM fails to load claiming the JAR file is invalid, but the Java Virtual Machine starts without error.
Click to expand...
Click to collapse
What JAR file is that? Midlet manager is only able to run non-device-specific midlets - that is, NOT Nokia/Sony-Ericsson etc. specific ones. With other stuff, it'll report about invalid JAR files.
Click to expand...
Click to collapse
Its the Google Local Generic MIDP 2.0 version off www.google.com/glm.
Runs on the SDA, but refuses to load on the MDA. The VM IS running now though.... thanks.
Genesis3 said:
Menneisyys said:
Genesis3 said:
Well it comes up now - GLM fails to load claiming the JAR file is invalid, but the Java Virtual Machine starts without error.
Click to expand...
Click to collapse
What JAR file is that? Midlet manager is only able to run non-device-specific midlets - that is, NOT Nokia/Sony-Ericsson etc. specific ones. With other stuff, it'll report about invalid JAR files.
Click to expand...
Click to collapse
Its the Google Local Generic MIDP 2.0 version off www.google.com/glm.
Runs on the SDA, but refuses to load on the MDA. The VM IS running now though.... thanks.
Click to expand...
Click to collapse
OIC... the generic MIDP2 version works great on my Qtek 1.6.7.1 ROM.
Leave it to T-Mobile to cripple the damn thing....
I've also been playing around with getting java on the T-Mob US MDA. I didn't have the benefit of an SDA, but on the ftp site I found various extended roms for the Wizard. Specifically on the 'O2 Mini Asia Exteded Rom...' I found a .cab that installs the jvm/midlet manager.
The program itself runs just fine, and installs and downloads the .jar specified in any jad file I execute. The problem comes when I try to run a program from within the Midlet Manager. What I get is:
Error
Failed to run the MIDlet
This happens with google, Opera and another program I want to run. Is this the same error you are getting?
The O2 Mini is a Wizard - correct? Could there be something else in the ROM that needs to be installed?
Anyone have any ideas?
No, I'm getting an error trying to LOAD the GLM site from www.google.com/glm.
It appears to load, goes through all the motions, and then complains about an invalid JAR file.
I don't have any JARs handy I can load off a local SD card to see if it will work with those. I'll look around for some....
So you are getting an error already when trying to download the app from Google? I don't know how familiar you are with J2ME apps, but they typically consists of 2 components. A .jad file which is a simple text file that describes some properties of the app and a link to the actual app.
The point I am at I can successfully go to the Google/glm site and select the Generic Advanced app, agree to terms and then I click to download. Once I do that PocketIE asks if I want to save or run the .jad file. I then select to run it, and it kicks off the midlet manager. Then the midlet manager will download the .jar file and it is available in the manager with icon and everything. Once I click on the Google or Opera icon to launch the J2ME app I get the error I described.
If I understood correctly it seems you haven't gotten this far yet?
Correct. I cannot load the application - it is transferred but the JMM application refuses to install it.
I suspect a registry difference here - and if we find it, we may have a working solution.
Well, I would have thought that the .cab I got from the other extended rom would create all the appropriate registry keys to run the program. At least jmm works and downloads the jar.
I have no idea why it won't run them though. I also used LokiWiz to unlock the device, and after that I had to reinstall the jmm cab because the device complained that jmm.exe was not signed/authorized.
I see that some keys have been created in HKLM\Software\Tao\. I have attached them here.
It may be a file association for the .JAR type....
After looking around a little in the registry, I can see that there are a lot of keys created. I think it will be difficult for you to manually copy everything from the SDA. There are entries for the right extensions, but there is one more interesting one that I'd like to see what is in the SDA (or any Wizard with Java capabilities) \HKCR\CEJavaVM. On my device it is empty.
ecf said:
After looking around a little in the registry, I can see that there are a lot of keys created. I think it will be difficult for you to manually copy everything from the SDA. There are entries for the right extensions, but there is one more interesting one that I'd like to see what is in the SDA (or any Wizard with Java capabilities) \HKCR\CEJavaVM. On my device it is empty.
Click to expand...
Click to collapse
That key is not there at all on the SDA nor on my MDA.
There are several file associations ("Jarfile" and "Jadfile") all of which look ok......
Works on a Cingular 8125
Do it works on a Cingular 8125, however, how do you get to Midlets after you install them?
EDIT: I just need a .lnk file to the JMM.
Danny
1) exe/dll's have to be all signed correct? I assume other files don't (bmp, xml, htm, etc)
2) are files in rom signed or are they assumed to be valid since they are in rom?
2a) if rom files are signed is this preserved on extract via viewimgfs?
3) Can you determine if a file is signed and which cert it was signed with?
4) I see cab's such as the recent Palm Messaging cab that don't appear to install a cert, yet the program runs fine once installed. How is this possible?
hannip said:
1) exe/dll's have to be all signed correct? I assume other files don't (bmp, xml, htm, etc)
Click to expand...
Click to collapse
.EXE, .DLL, .CPL and .CAB files must be signed.
hannip said:
2) are files in rom signed or are they assumed to be valid since they are in rom?
Click to expand...
Click to collapse
All cabs in Extended rom must be signed.
hannip said:
2a) if rom files are signed is this preserved on extract via viewimgfs?
Click to expand...
Click to collapse
Don't know... :O
hannip said:
3) Can you determine if a file is signed and which cert it was signed with?
Click to expand...
Click to collapse
Yes. If you look in the "Digital signatures" tab in the files properties you will see both who signed it and who it was signed for.
hannip said:
4) I see cab's such as the recent Palm Messaging cab that don't appear to install a cert, yet the program runs fine once installed. How is this possible?
Click to expand...
Click to collapse
On a Pocket PC running WM 5.0 a notification will appear that says that the cab comes from a untrusted source. If the user accepts this, the application will run as if it were signed.
Øystein
t0flus said:
On a Pocket PC running WM 5.0 a notification will appear that says that the cab comes from a untrusted source. If the user accepts this, the application will run as if it were signed.
Øystein
Click to expand...
Click to collapse
Thanks for the quick reply!
I'm real curious on the last point. So you are saying as long as a program is installed via a cab and the user accepted the warning that program will run without warning once installed. Correct? So is there some db that contains each file installed and whether they can be run without warning even though it's unsigned?
I must be missing something. I've created a cab file of the HTC StreamingMedia player and it runs fine as long as I have the policies set not warn. But when I change the policies back to normal I can't install the cab even though I've accepted the warning. The installation seems to be going ok, but then I get the following error.
"Installation was unsuccessful. The program or setting cannot be installed because it is not digitally signed with a trusted certificate."
Nice of it to tell me which file or setting it is bombing on. ugh
Ideas?
So the answer to 2a is yes and no. Files are extracted signed, but module-files are not.
hannip said:
So the answer to 2a is yes and no. Files are extracted signed, but module-files are not.
Click to expand...
Click to collapse
Probably they are signed with a cert you don't have on your phone??
If you have the cert, then try extracting them using TestWM5.exe or grab_it! and see if it makes any difference.
pof said:
Probably they are signed with a cert you don't have on your phone??
If you have the cert, then try extracting them using TestWM5.exe or grab_it! and see if it makes any difference.
Click to expand...
Click to collapse
All of the files in my cab are appropriately signed and the certificate is installed on my device. The cab just wont install. I even signed the cab and it still complains, but at least there is no warning at the start.
The files themselves are good. I have tested them on my device by installing them manually and importing the reg file. It's just a cab install issue of some sort.
Is there a way to turn on cab tracing?
One thing:
What device exactly is it?
I know on Smartphones (like the Tornado) even signed cabs are not allowed to install certificates unless the cab is signed by 'privileged' certificate.
The error you described is often caused by cab no being able to change registry setting or install certificates.
It's a PPC device (treo 700wx). The cab does not install a cert. The cert is already on the device. I've been able to install certs via cab before on this device however. The cab does make several reg changes. I'm thinking it's gotta be one of those settings.
Is there no trace or logging available for cab installs? This one is huge and would take some time to narrow down which setting it is having a problem with.
Unfortunately I don't know of any loggers for cab installation.
You should look for reg settings in HKEY_LOCAL_MACHINE and anything having to do with security, certifications, system settings (I know its a wide range, sorry). Those are usually restricted and can only be changed by privileged cabs.
I suppose the only solution is to comment them all and then return them one by one to see which is problematic.
you might want to check out:
http://msdn.microsoft.com/library/d...gpoliciesoncabfileinstallationprocessozup.asp
even though there is wce51 in the url, it's under softphone2003. Security on a single tier sp2003 is very simular to pocket pc 2005. I suspect most (or all) of it will applies.
I had tried to install a file in the top directory and it failed, but worked for another directory. Perhaps I made a mistake, but it made me wonder if somethings aren't allowed. (putting files in \, changing certain registry settings, etc)
hannip said:
It's a PPC device (treo 700wx). The cab does not install a cert. The cert is already on the device. I've been able to install certs via cab before on this device however. The cab does make several reg changes. I'm thinking it's gotta be one of those settings.
Click to expand...
Click to collapse
What kind of cert have you installed? Are you sure it is a application certificate and not a ROOT cert?
If you upload the cab file I can take a look at it...
Øystein
Hello,
Have anobody a signed itsutils.dll? or a programm that load this fu**ing .dll without a user prompt (Yes/No) on a Windows Mobile 5 Device.... I need this for a Software deployment.
Greetz
acme said:
Hello,
Have anobody a signed itsutils.dll? or a programm that load this fu**ing .dll without a user prompt (Yes/No) on a Windows Mobile 5 Device.... I need this for a Software deployment.
Greetz
Click to expand...
Click to collapse
Here is the solution:
Extract everything in a directory on your pc.
From the Command Prompt, go in the directory where you extracted the files and type: sign.bat [path of the dll or exe to be signed]
ex.:
c:\signcode>sign.bat c:\itsutils.dll
Cheers,
.Fred
Hello, It doesnt work
C:\...Downloads\SignCode>sign itsutils.dll
Warning: This file is signed, but not timestamped.
Succeeded
After this step i copy the modified .dll to \Windows (PDA) on my device. No i start the psynctime.exe on WinXP and my Device starts a user prompt for ItsUtils.dll (YES/NO). Thats the Problem
The 'not time stamped' is normal, but what you are trying to do won't work.
Here's the thing: The certificate in the attached cab is the test certificate from WM5 SDK. In order for device to recognize it you need to first provision the device (import the certificate). I can attach the cab that does it, but it isn't signed as well, so it will still ask for yes / no.
If you are looking to by pass certificates on a distribution version of your software you are out of luck.
For apps and cabs not to ask yes / no they have to be signed by an official Verisign certificate (costs money) or the device has to be set to no cert.
The second option is even more problematic for the average user, since it requires installing a reg editor on the device and changing some reg settings.
Ok, do you know an other way to stop this user prompt? Install method with automatic /yes or something like that.
Why don't you use the certified CAB that changes the registry values to allow Unsigined apps to be installed?
Check this post: http://forum.xda-developers.com/showthread.php?t=252356
dotfred said:
Here is the solution:
Extract everything in a directory on your pc.
From the Command Prompt, go in the directory where you extracted the files and type: sign.bat [path of the dll or exe to be signed]
ex.:
c:\signcode>sign.bat c:\itsutils.dll
Cheers,
.Fred
Click to expand...
Click to collapse
Hi!
If i want to sign my edited MUI file how can i do that?
Can you five me a syntax and what else need to be inside the folder?
ToddeSwe
Ok I took a cab file that installed properly before and needed to modify one of the files in the cab.. so I used WinCE Cab Manager and resaved the cab.. but it won't install I get the error message.
Installation was unsuccessful. The program or setting cannot be installed because it does not have sufficient system permission.
Click to expand...
Click to collapse