CAPABILITY NetworkControl problem

Login to reply to this topic.
Tue, 2006-08-01 08:48
Joined: 2006-07-10
Forum posts: 17
Hi,

I am getting the following error when I try to install an applicaiton on device:

"Required application access not granted"

I am installing an application on an N80 device (Symbian v. 9).  The application makes use of TCP/IP to connect to the internet.  I have read here that I need NetworkServices and NetworkControl capabilities for this.  So, I went to symbiansigned.com and requested a manufacturer devcert, which I got from Nokia.  I used the certificate to sign my .sis file, and I placed this line in the application's .mpp file:

CAPABILITY                              NetworkServices NetworkControl

Why then am I still unable to install the app?  Is there something I am forgetting to do?

Thanks for your help.

Dennis

Tue, 2006-08-01 14:20
Joined: 2005-03-14
Forum posts: 59
Re: CAPABILITY NetworkControl problem
You need to sign the application.
"CAPABILITY" in .mmp files just states capabilities your application wants to use.
Read some more documentation on signing application in SDK and on symbiansigned page.
Tue, 2006-08-01 18:57
Joined: 2006-03-04
Forum posts: 194
Re: CAPABILITY NetworkControl problem
Can you clarify what type of certificate you got - i.e. is it a developer certificate or a real certificate? When you requested it did you have to specify which capabilites it was to endorse?
Thu, 2006-08-03 09:07
Joined: 2006-07-10
Forum posts: 17
Re: CAPABILITY NetworkControl problem
Thank you for your replies.  I really do appreciate this forum since for me it's the best place to get answers for Symbian development questions.

I got a manufacturer's developer certificate from Nokia. Actually, I am still not quite certain what capabilities this certificate grants me even though I followed the instructions at symbiansigned.com carefully.  I suspect that all this certificate grants me is the basic set of capabilities that I get with a regular (non-manufacturer dev certificate).  I need NetworkControl capability for the application since it uses TCP/IP to connect to the Internet.

On the second step of the Certificate Request Wizard, it asks for an ACS Publisher ID.  Since we don't have one (yet), I checked the 'No' radio button and then it asks me to select a 'Private Key file', and for a password, which I supplied.  Then on step 4, it lists the capabilities that I am requesting.  NetworkControl is not one of the capabilities listed here.

I used this very same certificate request file (.csr) to request the manufacturer's certificate from Nokia.  So now I'm thinking that since step 4 only had the basic set of capabilities listed (I selected all of them) then the .csr file only included that basic set and does not include NetworkControl as a capability and so the Nokia certificate doesn't include that.

My question now is -- if all that is true, then how do I get the Certificate Request Wizard to show NetworkControl capability on step 4?  Must I supply an ACS Publisher ID in order for NetworkControl to be listed in Step 4 of the Wizard?  Or does a manufacturer's dev cert automatically contain the basic plus the extended set of capabilites and is not dependent on the .csr file?

Any help would be greatly appreciated.

Thanks,
Dennis
Fri, 2006-08-04 09:32
Joined: 2006-05-10
Forum posts: 71
Re: CAPABILITY NetworkControl problem
Hi Dennis,

              Its really hard to obtain a certificate with "network control" capability for a normal 3rd party developer as the certificate with network control capability is highly dependent on both "ACS publisherID" and "Phone Manufacturer's approval".

           especially for a normal 3rd party developer ,"phone manufacturer's approval" is very hard to obtain. if u r working in any organisation, that organisation should have some kind partnership like "Symbian PLATINUM partner" with NOKIA, so that u can request for that certificate. but  im really not aware of the process to obtain "phon. man. approval".

       anyway ALL THE BEST....  Smiley
Sat, 2006-08-05 11:17
Joined: 2005-02-18
Forum posts: 100
Re: CAPABILITY NetworkControl problem
NetworkService is sufficient for normal TCPIP (clients and servers).

Just out of curiosity, what do you need the NetworkControl for?
Sat, 2006-08-05 11:34
Joined: 2006-05-10
Forum posts: 71
Re: CAPABILITY NetworkControl problem
ya... even i had this doubt as msa2 asked... why do u need "network control" capability for normal TCP/IP services... to my knowledge "network control" capability will be needed when u use any kind PRT protocol module for monitoring all kind of packet traffic... are u using any such PRT modules in ur code?Huh?

 
Tue, 2006-08-08 07:10
Joined: 2006-07-10
Forum posts: 17
Re: CAPABILITY NetworkControl problem
Hi msa and mudhalvan,

I am trying to understand what capabilities I need for TCP/IP  I am not trying to do anything unusual--just a normal socket connection.  I read the following in the SDK documentation in an article titled 'Symbian OS changes for platform security':

<quote>
For instance, a process needs the NetworkServices capability to open a TCP or UDP socket. Hence a process also needs the NetworkServices capability to transfer a TCP or UDP socket. Similarly, a process needs the NetworkControl capability to open an IP or ICMP socket. Hence a process also needs the NetworkControl capability to transfer a IP or ICMP socket.
</quote>

I suppose it's my ignorance of the TCP/IP protocol, but doesn't this mean that I need NetworkControl capability for a "normal" socket connection?  In any event, I have not been able to install the application on an N80 device without the "Required application access not granted" error during the install.  I tried removing the CAPABILITY statement from the .mmp file (which I read is equivalent to CAPABILITY None), and the application installs, but always times out on a TCP/IP connect attempt.

Thanks for your help,
Dennis


Tue, 2006-08-08 07:25
Joined: 2006-07-10
Forum posts: 17
Re: CAPABILITY NetworkControl problem
Hi,

It was my misunderstanding of the SDK documentation that caused this problem.  I changed my .mmp file statement from

CAPABILITY NetworkService NetworkControl

to just

CAPABILITY NetworkService

and now the application installs and connects.  Thanks, all.

Dennis
Tue, 2006-08-15 20:21
Joined: 2006-08-15
Forum posts: 5
Re: CAPABILITY NetworkControl problem
Quote from: mudhalvan
why do you need "network control" capability for normal TCP/IP services... to my knowledge "network control" capability will be needed when you use any kind PRT protocol module for monitoring all kind of packet traffic...

You need NetworkControl even for writing a simple ping tool.  That's ridiculous.
Wed, 2006-08-16 07:11
Joined: 2005-06-09
Forum posts: 174
Re: CAPABILITY NetworkControl problem
Quote from: OldLC
You need NetworkControl even for writing a simple ping tool.  That's ridiculous.

Ping might be "simple", but it's fairly low-level. (On Unix you need to run it as root (or install it suid root).)

Wed, 2006-08-16 10:26
Joined: 2006-08-15
Forum posts: 5
Re: CAPABILITY NetworkControl problem
Quote from: puterman
Ping might be "simple", but it's fairly low-level. (On Unix you need to run it as root (or install it suid root).)

On Unix, ping comes with the operating system.  On SymbianOS 9, the only one who can provide a ping tool is the phone manufacturer, and he doesn't.
Thu, 2006-08-17 04:45
Joined: 2005-06-09
Forum posts: 174
Re: CAPABILITY NetworkControl problem
OldLC: What you're saying is that platsec is bad for developers.  I'm sure everyone agrees with that.

  • Login to reply to this topic.