CreateSIS - Wrapper for MakeSIS, SignSIS and MakeKeys

• Purpose

• Diagram

• Also see

CreateSIS is a wrapper around around the PC tools MakeSIS, SignSIS and MakeKeys to facilitate the generation and signing of appropriate SIS files. The user may supply a key/certificate pair with which to sign the file or, in the event no such appropriate pair is provided, the tool shall generate a self-signed certificate and matching key for this purpose.

If a self-signed certificate is generated, the Distinguished Name (DN) details may be supplied by the user, or automatically generated from details in the package file. In either event, the DN shall include a randomly generated element to uniquely identify the certificate DN.

Note that since v9.1, SIS file signing is mandatory. Installation of untrusted applications is still allowed and a means of better identifying them for later revocation is provided in the event that this becomes necessary.

Createsis shall support the command line options specified below:

• createsis create [-cert <cert>] [-key <key>] [-pass <passphrase>] <package>

  Creates and signs a SIS file with a trusted key

• createsis sign –cert <cert> -key <key> [-pass <passphrase>] <sis_input> <sis_output>

  Signs a pre-existing SIS file with a trusted key

• createsis strip <sis>

  Removes the most recent signature from the SIS file.

• createsis dump <sis>

  Dumps the certificates and signatures in a pre-existing SIS file

• createsis –h | -?

  Command line help.

The following diagram shows how the PC based tool (CreateSIS) is used to construct an installation package (SIS file) from component files, using instructions detailed in a PKG file, and sign it.

• CreateSIS - Wrapper for MakeSIS, SignSIS and MakeKeys syntax

• Package file format .pkg