MakeKeys Reference

The MakeKeys tool creates private key-public key pair and certificate requests. MakeKeys can be run from an MSDOS command prompt or as a batch file.

Syntax

makekeys [OPTIONS] <ARGS>

The following table lists the options supported by MakeKeys:

Option Description Usage

Option	Description	Usage
`-cert`	Creates a private key (`private-key-file`) and self-signed certificate (`public-key-cert`). If the private key file exists, it is used to create the self-signed certificate.	`makekeys -cert [-v] [-expdays <cert-expiry-in-days>] [-password <password>] [-len <key-length>] -dname <distinguished-name-string> <private-key-file> <public-key-cert>`
`-req`	Creates a certificate request.	`makekeys -req [-v] [-password <password>] -dname <distinguished-name-string> <private-key-file> <public-key-cert> <cert-request-file>`
`-view`	Displays details of a certificate or certificate chain file.	`makekeys -view <public-key-cert>`

-cert

Creates a private key (private-key-file) and self-signed certificate (public-key-cert).

If the private key file exists, it is used to create the self-signed certificate.

makekeys -cert [-v] [-expdays <cert-expiry-in-days>] [-password <password>] [-len <key-length>] -dname <distinguished-name-string> <private-key-file> <public-key-cert>

-req

Creates a certificate request.

makekeys -req [-v] [-password <password>] -dname <distinguished-name-string> <private-key-file> <public-key-cert> <cert-request-file>

-view

Displays details of a certificate or certificate chain file.

makekeys -view <public-key-cert>

The following table lists the arguments to be provided:

Arguments Description

-v

Displays verbose output.

-I

Displays OpenSSL license information.

-expdays cert-expiry-in-days

Displays certificate validity period in days after which the certificate expires.

If not specified, the default is 1 year.

-dname distinguished-name-string

Specifies the distinguished name attributes required for the self-signed public key certificate file. This command-line option can be constructed using a string of white-space separated key-value pairs as follows:

Key	Attribute	Example
`CN`	Common Name	`CN=Joe Bloggs`
`OU`	Organisational Unit	`OU=Development`
`O`	Organisation	`O=Nokia`
`L`	Locality	`L=`
`ST`	State	`ST=`
`C`	Country	`C=GB`
`EM`	E-mail address	`EM=noone@nowhere.com`

A distinguished name string needs at least two attributes.

-password password

Specifies the password for private key. After creating private key-public key pair, a password must be provided to subsequently use the private key.

-len key-length

Specifies the length of the key.

The minimum key length is 512, maximum is 4096. The default key-length is 1024.

private-key-file

The file containing the private key. The private key must be kept secret by the Symbian developer.

Has a .key extension.

public-key-cert

A self-signed certificate containing the public key.

Has a .cer extension.

cert-request-file

A self-contained file which is sent to the Certification Authority (CA) for signing. The MakeKeys tool creates this file given a private and public key. It is then up to the Symbian developer to send the file to the CA and arrange for the application for the certificate.

Has a .p10 extension.

Related concepts

MakeKeys Overview

Related tasks

MakeKeys Tutorial