BlackBerry代码签名工具申请及安装介绍

BlackBerry代码签名工具申请及安装介绍

 

背景

出于安全和出口控制的原因，Research In Motion (RIM)必须跟踪一些敏感BlackBerry®应用程序编程接口（API）的使用情况。敏感类别或方法在API参考文档中使用“锁定”图标或“Signed”字样表示。如果您在应用程序中使用了这些受控类，在您将应用程序.cod文件加载到BlackBerry智能手机之前，您的应用程序必须使用签名工具（由RIM提供）进行签名。完成注册流程需要提供有效的信用卡，将收取管理费20美元。官网介绍: http://cn.blackberry.com/developers/javaappdev/codekeys.jsp

 

一、概述

在Blackberry的开发中，如果您的应用程序使用了受控API，在加载到Blackberry智能手机之前，必须使用RIM提供的签名密钥对其进行签名，签名所用的key需要向RIM申请。本文档介绍RIM签名的申请过程及在公司共用一个签名情况下的环境搭建。

注意：仅当要在BlackBerry智能手机上运行应用程序时，才需要对应用程序进行注册和签名。使用Blackberry智能手机模拟器运行应用程序时不需要对其进行签名。

 

二、签名申请

 要注册以获得BlackBerry运行时、应用程序和加密API，您需要填写这一Web表单。注册完成后，您将会通过电子邮件收到一系列密钥和相关安装说明，可用于使用BlackBerry签名工具对您的应用程序进行签名。完成注册流程需要提供有效的信用卡，将收取管理费20美元。

注意：通常，密钥会在提交必要表单后的48小时内发送到您的电子邮箱，但有时这一过程也会花费长达10个工作日的时间。中国申请的签名，一般需要5到10个工作日的时间。因为密钥会作为附件发送到邮箱，因此所使用的邮箱需要避免将该邮件作为垃圾邮件过滤或者自动删除附件。

 

签名申请前请准备：

1）  接收密钥的邮箱

2）具有美元消费功能的信用卡（国内的信用卡，Vista和Master）

 

签名申请的URL为：https://www.blackberry.com/SignedKeys/

 

需要填写以下表单1：

 

对于中国的姓名，一般来说，first name是名，last name是姓，这个对签名的申请不是关键。接下来的company填写公司的英文名称，Email填写要接收密钥的邮箱，phone填写个人的电话号码，Address、city作为公司的话，填写公司的地址，province一般保持原样，country选择china，postal/zip code填写邮政编码，Quantity不需要填写。

 

接下来填写第二个表单2：

 

 

 

PIN是指自己定义的密码，10位数字，请牢记该密码，在后续接收到RIM的密钥后会用到。接下去关于YES/NO的选项是关于RIM引用加密API相关，可以进一步了解，一般选择NO就可以。

 

再接下去是信用卡信息，注意要填写正确，CardHolder Name信用卡持有人的姓名是指信用卡正面的英文名。CardHolder Phone指信用卡持有人的电话，一般直接填写个人的电话号码即可，CardHolder Email指信用卡持有人的Email，可以和上面表单一样，Credit Card Type信用卡的类型，信用卡正面可以找到；Credit Card Number信用卡号码，Expiration Date信用卡过期时间，在信用正面可以找到，Credit Card  security Number信用卡安全号只信用卡背面的三位数字。如果对信用卡各项内容不清楚，可以从发卡行的网站或者银行信用卡电话寻求帮助。

填写提交之后，会出现一个总结性的页面，在这个页面要求用户确认，最好拷贝或者记录各项信息，页面下面有最终的提交按钮，按下之后将不可撤销。在提交之后，一般国内的信用卡消费美元会给你电话确认（如果出现这个，申请成功的可能性就会很大）。

注意：在申请成功提交之后，会出现$30的信用卡交易，RIM的回答如下：

the initial $30 charge is a holding fee placed by the credit card company to verify that the funds are available for the transaction, this amount is higher than the listed $20 fee to account for currency changes, taxes etc. This is a temporary value and will not remain on your bill, the actual amount for the keys is $20 US.

大概意思是$30类似于在用信用卡入住酒店时的冻结资金，实际金额在成交之后按照$20结算。

到此，申请的过程完结，接下去需要等待RIM答复，注意，5-10天是指工作日，而非自然日。

 

三、环境搭建

 在成功申请后，RIM会发若干封邮件，其中至少有三封包含附件的邮件，三个附件分别为：

client-RBB-XXXXXXXXXX.csi

client-RCR-XXXXXXXXXX.csi

client-RRT-XXXXXXXXXX.csi

其中XXXXXXXXXX是指申请签名的client ID。三个附件为RBB, RRT and RCR keys.

每封邮件都介绍有附件的使用方法，按照里面的步骤安装签名就可以了。内容如下：

The following attachment will allow the BlackBerry SignatureTool to register with the Signing Authority. Please ensure that the BlackBerry development tool of choice has been installed onto the workstation that will be used to sign your BlackBerry applications.

 

To register the attachment, please follow the instructions below:

 

If you plan to use both the BlackBerry JDE and BlackBerry JDE Plug-in for Eclipse install the signature keys using the BlackBerry JDE.  This should allow you to sign from either tool.

 

BlackBerry JDE or BlackBerry JDE Component Package Users:

1)   Double-click on the attachment.

2)   If a dialog box appears that states that a private key cannot be found, complete steps 3 through 6 before you continue. Otherwise, proceed to step 7.

3)   Click "Yes" to create a new key pair file.

4)   Type a password for your private key of at least 8 characters, and type it again to confirm.  This is your private key password, which protects your private key. Please remember this password as you will be prompted for it each time signing is attempted or a signature key is installed.

5)   Click "Ok"

6)   Move your mouse to generate date for a new private key.

7)   In the "Registration PIN" field, type the PIN number that you supplied on the signature key order form.

8)   In the Private Key password field, type the password created in step 4.

9)   Click "Register".

10) Click "Exit".

11) Repeat this process for the other .csi files.

 

BlackBerry JDE Plug-in for Eclipse Users:

1)   Save all 3 .csi files in the same directory (each one will be sent in a separate email message).

2)   Start Eclipse.

3)   Click on the BlackBerry menu and choose Install Signature Keys.

4)    Select one of the 3 .csi files saved in step 1 and click Open.

5)   Click "Yes" to create a new key pair file.

6)   Type a password for your private key of at least 8 characters, and type it again to confirm.  This is your private key password, which protects your private key. Please remember this password as you will be prompted for it each time signing is attempted or a signature key is installed.

7)   Move your mouse to generate date for a new private key.

8)   In the Registration PIN" field, type the PIN number that you supplied on the signature key order form.

9)  In the Private Key password field, type the password created in step 6.

10) Click "Register".

11) Click "Exit".

12) Repeat this process for the other csi files.

 

BlackBerry Widget SDK, BlackBerry Web Development Plug-in for Eclipse or BlackBerry Plug-in for Microsoft Visual Studio Users:

1) At the command prompt, navigate to the bin folder within the BlackBerry Widget Packager installation directory.  Default directories are:

BlackBerry Widget SDK and BlackBerry Plug-in for Microsoft Visual Studio:

C:/Program Files/Research In Motion/BlackBerry Widget Packager/bin  BlackBerry Web Development Plug-in for Eclipse:

<Eclipse Installation>/plugins/ net.rim.browser.tools.wcpc/ wcpc/bin C:/Program Files/Research In Motion/BlackBerry Widget Packager/bin

2) Type the following command, including the full path of the .csi file:

java -jar SignatureTool.jar <.csi file path>

3)  If a dialog that a private key cannot be found appears, perform the following actions:

a. Click Yes.

b. Type a password for the private key.

c. Type the password to confirm it.

d. Click OK.

e. Move the mouse to generate data for the new private key.

4) In the Registration PIN field, type the PIN that RIM. provided.

5) In the Private Key Password field, type a password of at least eight characters. This is the private key password.

6) Click Register.

7) Click Exit.

 

 

Important information for all users:

Note: All 3 keys (RBB, RCR, RRT) received need to be installed on the same PC.  The same password must be specified for all keys on the same PC.  You should receive each key/.csi file in a separate email message.

 

For further information on BlackBerry Controlled APIs and signing of applications, please refer to the BlackBerry Signature Tool Developer Guide version 4.2.0, found at the following link:

 

http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8067/645045/8655/8656/1271077/BlackBerry_Signature_Tool_Developer_Guide.pdf?nodeid=1271325&vernum=0

 

Please note:  When registering with the signing authority, ensure that you have correctly entered your registration PIN number.  If you enter the incorrect PIN 5 times, your keys will be deactivated.

 

Troubleshooting:

 

If you are having difficulty installing or registering your signature keys please check the Signature Key and Code signing section of the Developer Knowledge Base found here:  http://www.blackberry.com/knowledgecenterpublic/livelink.exe?func=ll&objId=800989&objAction=browse&sort=name

 

If you continue to experience issues please contact devsupport@rim.com.

 

Best of luck with your development and thank you for your interest in BlackBerry.

 

Regards,

BlackBerry Application Development Support Team http://www.blackberrydeveloper.com

 

 

Date Issued: Tuesday, March 16, 2010 @ 14:54:15 Keys Issued: RRT

Recipient: youremail@rim.com

 

<<client-RRT-207634362.csi>>

 

 

---------------------------------------------------------------------

This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.

 

注意事项：

1.       如果希望签名工具能够同时支持BlackBerry JDE和BlackBerry Java Plugin for Eclipse，需要先为BlackBerry JDE安装

2.       每次要签名应用的时候，就拷贝cod和csl文件到该机器，打开cod文件完成签名。

3.       如果需要卸载JDE重新安装，一定要预先备份以下三个文件