MakeKeys Reference

The MakeKeys tool creates private key-public key pair and certificate requests. MakeKeys can be run from an MSDOS command prompt or as a batch file.

Syntax

makekeys [OPTIONS] <ARGS>

The following table lists the options supported by MakeKeys:

Option Description Usage

-cert

Creates a private key (private-key-file) and self-signed certificate (public-key-cert).

If the private key file exists, it is used to create the self-signed certificate.

makekeys -cert [-v] [-expdays <cert-expiry-in-days>] [-password <password>] [-len <key-length>] -dname <distinguished-name-string> <private-key-file> <public-key-cert>

-req

Creates a certificate request.

makekeys -req [-v] [-password <password>] -dname <distinguished-name-string> <private-key-file> <public-key-cert> <cert-request-file>

-view

Displays details of a certificate or certificate chain file.

makekeys -view <public-key-cert>

The following table lists the arguments to be provided:

Arguments Description

-v

Displays verbose output.

-I

Displays OpenSSL license information.

-expdays cert-expiry-in-days

Displays certificate validity period in days after which the certificate expires.

If not specified, the default is 1 year.

-dname distinguished-name-string

Specifies the distinguished name attributes required for the self-signed public key certificate file. This command-line option can be constructed using a string of white-space separated key-value pairs as follows:

Key Attribute Example

CN

Common Name

CN=Joe Bloggs

OU

Organisational Unit

OU=Development

O

Organisation

O=Symbian Foundation

L

Locality

L=

ST

State

ST=

C

Country

C=GB

EM

E-mail address

EM=noone@nowhere.com

A distinguished name string needs at least two attributes.

-password password

Specifies the password for private key. After creating private key-public key pair, a password must be provided to subsequently use the private key.

-len key-length

Specifies the length of the key.

The minimum key length is 512, maximum is 4096. The default key-length is 1024.

private-key-file

The file containing the private key. The private key must be kept secret by the Symbian developer.

Has a .key extension.

public-key-cert

A self-signed certificate containing the public key.

Has a .cer extension.

cert-request-file

A self-contained file which is sent to the Certification Authority (CA) for signing. The MakeKeys tool creates this file given a private and public key. It is then up to the Symbian developer to send the file to the CA and arrange for the application for the certificate.

Has a .p10 extension.

Related concepts
MakeKeys Overview
Related tasks
MakeKeys Tutorial