[y.a.k]

Hi,

during the development of Ped, I found it frustrating having to go to symbiansigned.com every time I wanted to sign a sis and then playing around with e-mails. So I came up with a tool to automate the process of signing a sis file using the Open Signed Online.

The tool is a Python script that takes all the needed info including the unsigned sis file as parameters and spits out a signed one.

The tricky parts are:
- Open Signed Online uses a captcha, you have to retype a security code from a picture during every submission,
- the service sends you back info including the signed sis download link using e-mails.

The first problem was solved by using wxPython to display a dialog with picture and text field to let you solve the captcha. So although this is a command line utility, it needs user interaction during every run. There's not much I can do about this.

The second issue was solved by giving the tool both e-mail address to pass to Symbian Signed as well as POP3 server address/login/password so it can log into the e-mail account and process the messages sent by Symbian Signed. The messages are then automatically deleted.

The signing session could look like this:

c:\Python25\Projects\opensignsis>opensignsis.py --imei=123456789012345 --email=foo.bar@gmail.com --server=pop.gmail.com --ssl --verbose PythonScriptShell_1_4_4_3rdEd_unsigned_testrange.SIS PythonScriptShell_1_4_4_3rdEd_imei_123456789012345.sis

warning: no caps specified, using 'ALL'
Processing security code...
* downloading image...
* opening dialog...
* security code: F4EE57A0
Sending request to Open Signed Online...
* request sent
warning: no login specified, using 'foo.bar'
warning: no passwd specified, prompting for one now
Password for 'foo.bar':
Waiting for request confirmation...
* polling the mailbox...
* confirming
* request confirmed
Waiting for signed file...
* polling the mailbox...
* polling the mailbox...
* downloading sis file
* saved as PythonScriptShell_1_4_4_3rdEd_imei_123456789012345.sis
Done

The caps could be read from the input sis by default, someone (jethro?) know how to do this?

Anyway, I would like to ask if there's interest in such a tool. If yes, please post any comments and suggestions you may have on this.

--- ADDED ---
The script can now be downloaded from my blog:
http://arkadiusz-wahlig.blogspot.com...ed-online.html

[croozeus]

Interesting!

Where can we try the Alpha ?

Have you made it public yet ?

Best regards,
Croozeus

[y.a.k]

No, not public yet. I just got it working yesterday and wanted to know if there's a point in doing all the stuff you have to do if you want to make your creation public . Also, there are still some bugs to iron out and few improvements I want to make.

Btw., anyone knows TkInter here? How do I go about creating a simple dialog with jpg picture and a text field? For just a simple captcha dialog I would prefer using it over wxPython because it's installed with Python by default.

[croozeus]

Originally Posted by y.a.k

No, not public yet. I just got it working yesterday and wanted to know if there's a point in doing all the stuff you have to do if you want to make your creation public . Also, there are still some bugs to iron out and few improvements I want to make.

Btw., anyone knows TkInter here? How do I go about creating a simple dialog with jpg picture and a text field? For just a simple captcha dialog I would prefer using it over wxPython because it's installed with Python by default.

Well there is a point of doing this. It could last till the Open signing procedure remains the same. You never know when there would be some changes in the system.

TkInter for captcha: How about using the BitmapImage Class ?

I am not quite a user of TkInter, but just some suggestion !

Best Regards,
Croozeus

[y.a.k]

Yes, if Open Signed Online procedure changes, this tool will fail of course. But doing such tools in Python is pretty easy and fast - I got it working in one evening. So I guess I can sacrifice one evening to make my life easier for some time. And if I'm still around when they change it, I'll update it (which, again, shouldn't take much time either, Python Power!).

I'll take a look at this class, thanks for the link.

[y.a.k]

Ok, I've left wxPython as TkInter isn't able to display jpeg files without external modules anyway.

The public version can be found on my blog:
http://arkadiusz-wahlig.blogspot.com...ed-online.html

[jethro.fn]

Originally Posted by y.a.k

The caps could be read from the input sis by default, someone (jethro?) know how to do this?

Sure.

Using Ensymble modules sisfield.py and symbianutil.py, something like this (hacked from cmd_signsis.py, not tested):

import sisfield
import symbianutil

def harvestcaps(infile):
    '''
    Collect a logic-OR of all capabilities in a SIS file.
    This function does not examine embedded SIS files!
    '''

    # Read input SIS file.
    f = file(infile, "rb")
    instring = f.read(MAXSISFILESIZE + 1)
    f.close()

    # Convert input SIS file to SISFields.
    uids = instring[:16]    # UID1, UID2, UID3 and UIDCRC
    insis, rlen = sisfield.SISField(instring[16:], False)

    # Ignore extra bytes after SIS file.
    if len(instring) > (rlen + 16):
        print ("%s: warning: %d extra bytes after input SIS file (ignored)" %
               (pgmname, (len(instring) - (rlen + 16))))

    # Try to release some memory early.
    del instring

    # Check if there are embedded SIS files. Warn if there are.
    if len(insis.Data.DataUnits) > 1:
        print ("%s: warning: input SIS file contains "
               "embedded SIS files (ignored)" % pgmname)

    # Collect SIS file descriptions.
    sisfiledescmap = mapfiledesc(insis.Controller.Data.InstallBlock)

    # Check capabilities of EXEs and DLLs.
    capmask = 0
    for sisfiledesc in sisfiledescmap.values():
        siscaps = sisfiledesc.Capabilities
        if siscaps != None:
            capmask |= symbianutil.rawdatatocapmask(siscaps.Capabilities)

    return capmask

def mapfiledesc(sisinstallblock, sisfiledescmap = {}):
    '''Recursively scan SISInstallBlocks for file indexes in
    SISFileDescription SISFields.'''

    # First add normal files to SISFileDescription file index map.
    for filedesc in sisinstallblock.Files:
        idx = filedesc.FileIndex
        if idx in sisfiledescmap.keys():
            # In theory, SIS files could re-use file data by using the
            # same file index in more than one place. This special case
            # is not supported, for now.
            raise ValueError("duplicate file index in input SIS file")
        sisfiledescmap[idx] = filedesc

    # Then, recursively call mapfiledesc() for SISIf and SISElseIf SISArrays.
    for sisif in sisinstallblock.IfBlocks:
        mapfiledesc(sisif.InstallBlock, sisfiledescmap) # Map modified in-place.

        for siselseif in sisif.ElseIfs:
            mapfiledesc(siselseif.InstallBlock, sisfiledescmap)

    return sisfiledescmap

EDIT: pgmname is not defined in this snippet. It should be a string containing the program name.

[y.a.k]

@jethro.fn

Thanks for the code. I may add this to opensignsis later.

@all

A new version (0.52) is available.

The new version creates an empty config file on the first run which can be filled with values later (using a text editor). This was added since most of the arguments passed to the previous version stayed the same for every SIS file and had to be repeated every time.
Read more...

[y.a.k]

Another quick update.

In the new version (0.53), the IMEI used during the sign process is displayed in output so even if it comes from a config file, you know which one you're using. You may also include it in the output file by putting "{imei}" in the output filename.
Read more...

[y.a.k]

The latest symbiansigned.com problems (all files are rejected, more) forced me to update opensignsis.py. The new version properly detects the problem and displays an error message with the failure reason.
Read more...

[croozeus]

Originally Posted by y.a.k

The latest symbainsigned.com problems (all failes are rejected, more) forced me to update opensignedsis.py. The new version properly detects the problem and displays an error message with the failure reason.
Read more...

The tool gets better and better.

Anyways, I tried the Open Signed Online Beta, again - It still fails

Its truely a BETA

Best Regards,
Croozeus

[GonzalezM]

It's fair to call it beta when it works in at least some capacity. Symbiansigned.com currently down-graded to vaporware.

[gaba88]

Originally Posted by GonzalezM

It's fair to call it beta when it works in at least some capacity. Symbiansigned.com currently down-graded to vaporware.

hi GonzalezM
yes you are absolutely correct but i suppose that there is nothing lower than a beta version so it is a beta version.

[GonzalezM]

Originally Posted by gaba88

hi GonzalezM
yes you are absolutely correct but i suppose that there is nothing lower than a beta version so it is a beta version.

I was just joking but some people here seem to take things more literally than they're intended.

But there's alpha testing which is done in house, usually in the development environment. Beta means that the software is finished but being tested by a limited audience. These days companies (like Google) just call production software "beta" so they aren't responsible if others lose money when their software fails.

Anyway, I guess it's fixed!

[gaba88]

Originally Posted by GonzalezM

I was just joking but some people here seem to take things more literally than they're intended.

But there's alpha testing which is done in house, usually in the development environment. Beta means that the software is finished but being tested by a limited audience. These days companies (like Google) just call production software "beta" so they aren't responsible if others lose money when their software fails.

Anyway, I guess it's fixed!

hi GonzalezM
man i was also joiking nothing a bit serious in that. And Thanks for all that comments about the versions.

Regards