N97 21.0.045 "IMPEPATA DI ROM V2" <== WITH FREE 20 CAPS ROOT CERT

[alex_l]

N97 21.0.45 "IMPEPATA DI ROM" COOKED MOD V2.

UPDATE:

CHANGELOG FROM V1:
   
- Freesign cert can now be used to verify signing against java midlets (basically now you can install midlets signed with freesign cert)
- Added Camera Quality mod
- Added data caching for all drives
- Added "Zoom Extreme by Dscobsct" theme effects with turbo manifest


***DISCLAIMER: ALTHOUGH I TESTED IT AND I HAD NO PROBLEM USING IT, THIS ROM COULD POTENTIALLY BRICK YOUR PHONE IF YOU DON'T KNOW WHAT YOU'RE DOING, I TAKE NO RESPONSIBILITY AND GIVE YOU NO WARRANTY.*****

You are not allowed to view links.
Register or Login

You are not allowed to view links.
Register or Login

Now, let's address the obvious: this is a specially cooked rom

it DOES contain 5 languages from N97 firmware for product code 0576358, specifically: English,Francais,Deutsch,Italiano,Espanol

it DOESN'T contain rompatcher+(sis/lite/signed/nothing) .

it DOESN'T contain ANY HACK whatsoever.

it DOESN'T embed any particular/different/updated/rebranded/customized software.

it WILL BE UPDATED to suit your particular/different/updated/rebranded/customized software needs

SO WHAT DOES MAKE THIS MOD SO SPECIAL ?

To satisfy my own rom need, I wanted a clean rom, not messed up with kernel hacks and binary patching; my (perhaps yours) CRITICAL FIRST need is to have the ability to install my OWN apps
without having to ask nokia permission; after all I shelled out 529 € so I want & deserve the right to fully own my phone.

What I did was AUGMENT the software installation certificate store (from here swicertstore), adding MY OWN (from here OUR) Root Installation CA Certificate, created just for the occasion.

Here it is guys, a 20 capabilities ( ALL CAPABILITIES ) Root Certificate DIRECTLY INTO THE PHONE SWICERTSTORE (stored in ROM obviously).

With this certificate present in ROM, and with the .cer/.key files included in this archive you'll be able sign EVERY SOFTWARE for your mobile, I can't stress enogh the concept in "EVERY".

What to do; use SisContents, or your favourite .sis file signer, use FreeSign.cer as certificate, FreeSign.key as certificate key with no password and sign what you want, then install to phone.

BUT DO I HAVE SO SIGN EVERY FU**ING SOFTWARE I NEED TO INSTALL ?

NO, YOU DON'T! JUST SIGN ROMPATCHER+ 2.3 (AN ALREADY FULLCAP-SIGNED COPY IS INCLUDED IN THIS ARCHIVE) AND INSTALL TO PHONE, NEXT UNPACK rp_patches.zip (included in this archive) AND PUT THE .rmp FILES IN e:\patches, then open rompatcher+, select installserver patch (open4all if you need it) and add it/them to auto.

So for the people (like me) that want to have choice, you can HACK your phone, or just sign and install what you want, THE CHOICE IS UP TO YOU.


OBVIOUSLY THE NEW CERTIFICATE STORE IS STORED IN ROM, SO DON'T MATTER HOW HARD YOU DEEP FORMAT YOUR PHONE, YOU'LL ALWAYS BE ABLE TO INSTALL APPS SIGNED WITH FREESIGN CERTIFICATE, THE ONLY WAY TO REMOVE IT IS BY RESTORING NOKIA ORIGINAL FIRMWARE.

Included in this release you'll find:

- a ROFS2 image to flash your phone with (download your N97 firmware with NAVIFIRM, then replace RM-505_21.0.045_prd.rofs2.V04 with the one in this archive)
- an ALREADY SIGNED rompatcher+ 2.3 sisx file to install RP+
- rp_patches.zip including installserver & open4all patches (put in e:\patches, then launch RP+)
- FreeSign.cer/FreeSign.key files to IMMEDIATELY start signing your apps to FULL-20-CAPS
- a swicertstore.dat file which includes the FreeSign FULL-CAPS certificate to replace the one in your preferred ROFS2 image if you want to cook a rom for a language different from the ones included here (copy in \resource\swicertstore.dat overwriting the default one)


RECOMMENDATIONS:


Flash it with JAF, there is a ton of tutorials, personally I follow the ones on forum.dailymobile.se "Symbian modding" section
Flash it with JAF, no really flash it with JAF because Phoenix only gives me a non booting phone after flashing a cooked firmware, no problems with stock firmware flashing.
Give some feedback if you like it and some suggestions for future versions


TO DO:

add a custom theme effect (this is a must)
integrate some updated apps like latest ovistore/ovimaps
feel free to suggest..


Enjoy your N97. Be Free.


DOWNLOAD "IMPEPATA DI ROM V1": You are not allowed to view links.
Register or Login

DOWNLOAD "IMPEPATA DI ROM V2": You are not allowed to view links.
Register or Login

Alex

[stuntsy99]

Somehow i dont think this will work on anyone else's phone... the CERT and key are binded to a specific IMEI, which in this case would be yours.

Of course i could be wrong but i dont have a N97 lying around on me...

[alex_l]

Somehow i dont think this will work on anyone else's phone... the CERT and key are binded to a specific IMEI, which in this case would be yours.

Of course i could be wrong but i dont have a N97 lying around on me...

You don't get it, I didn't add MY DEVCERT, I added a FULL ROOT CA SELF-SIGNED 20 CAPS CERT, basically anyone can sign ANYTHING with it and install on any phone having this cert embedded; no limits on caps, on ids, on imeis: nothing, nada, caput.

[steven25]

downloading now to unpack certs

[steven25]

ah so the cert aint embedded into system

still have to use freesigner,

wont bother

[alex_l]

ah so the cert aint embedded into system

still have to use freesigner,

wont bother

The new cert IS embedded in the firmware, in z:\resource\swicertstore.dat !!!!

Read the readme!!!

[steven25]

The new cert IS embedded in the firmware, in z:\resource\swicertstore.dat !!!!

Read the readme!!!

if thats the case why need freesigner? should be able to install anything, without need for signing

[alex_l]

if thats the case why need freesigner? should be able to install anything, without need for signing

Because it's not hacked out of the box! By embedding the certificate you have full capabilities to install any application, including rompatcher+ 2.3

using rompatcher+ 2.3 you can then select to auto-apply the installserver patch on every reboot, so you don't need to sign applications.

[jipee296]

thanks for this.. Going to try this on the weekend.. Btw, is this compatible on rm507?

[maler]

thanks    +1
i have integradet the swicertstore.dat in my cfw for 5800
without patcher.lld + patchershadow.lld
then install rompatcher 2.3full not lite and its copy the lld same and phone is hacked thanks this cert is unbelievable

[vaterix]

then install rompatcher 2.3full not lite and its copy the lld same and phone is hacked thanks this cert is unbelievable

Is autorun still on after restarting the phone mate?

[alex_l]

Is autorun still on after restarting the phone mate?

Of course.

[oreo27]

+1 Truly great. Me and some mates of mine were talking about this earlier in another thread, but no one knew how to make certificates. So I guess you did it. Out of curiosity though, how did you do it?

[alex_l]

+1 Truly great. Me and some mates of mine were talking about this earlier in another thread, but no one knew how to make certificates. So I guess you did it. Out of curiosity though, how did you do it?

I used the Symbian platform reference documentation on Symbian foundation's developer website You are not allowed to view links.
Register or Login to understand how the Symbian Platform stores certificates in the device, and how to handle certificates stores on pc, for which they supply a tool facility in one of the platform packages.

Next I had to understand the requirements and characteristics that a certificate must comply with to use it for content signing verification, for which purpose they provide a pc tool (in another package of the platform) to create certs on pc; I created a test cert with this tool, tested it and it worked; however I wanted a cert with no-expiry date, so I created a new cert direcly with openssl which met the symbian requirements, but without an expiry date (the symbian tool doesn't allow a non expiring certificate).

Once I had the certificate i wanted, I added it to the standard certificate store file, gave it access to all 20 capabilities, then replaced swicertstore.dat file on the ROFS2 with my new one, flashed the phone, signed rompatcher+ (which need critical caps like 'AllFiles', 'DRM', and 'TCB') with the cert I created and embedded , and verified that it would install and work as normal.

Then I just shared the results

Basically, I don't like playing much with very low-level stuff, I didn't want to hack it out of the box, I wanted a clean solution which gives me the CHOICE to eventually OWN my phone without hacking it; also I didn't like to embed only patcher.ldd and patchershadow.ldd because then I would always need a devcert to install rompatcher+ lite, and didn't want to embed it directly because of the autostart problem when running from z:\ which annoyed me a lot.

 For my taste, this is the perfect solution.

And also, it was fun

[alex_l]

thanks for this.. Going to try this on the weekend.. Btw, is this compatible on rm507?

I think it should, but don't take me on this; if you want to be sure, download the 21.0.045 ROFS2 file matching your phone's product code, then copy my swicertstore.dat into it with nokiaeditor; just replace the default one in \resource .

[kirpeace]

+1 about the swicertstore.dat file
can u give seperate the swicertstore.dat file for me pls

[carttlew]

by flash phone,now i hava a Modo with 20 capabilities,how could i install root cer to phone, i try so much,but i cant install root cer.
5630XM ver:13.009

[vaterix]

alex_l

+1 to you mate for your work, looking forward for new mods/hacks

[Il.Socio]

Good Job Alex!

I didn't like to embed only patcher.ldd and patchershadow.ldd because then I would always need a devcert to install rompatcher+ lite

Actually, RP+ lite can be signed with OpenSigned online too... you don't need a devcert.

You could also add the LeftUp Root-CA instead of your own CA, this way, it would be possible to install immediately the full RP+ .sisx package which has been already signed with the LeftUp 20caps cert.

[alex_l]

+1 about the swicertstore.dat file
can u give seperate the swicertstore.dat file for me pls

You can find the .dat file in the .rar i linked in the first post bro