Signing on Windows CE.

Windows CE provides a security mechanism to ask the user to confirm

that he wants to use an application/library, which is unknown to the

system. This process gets repeated for each dependency of an 

application, meaning each library the application links to, which is

not recognized yet.

To simplify this process you can use signatures and certificates. A 

certificate gets installed on the device and each file which is

signed with the according certificate can be launched without the

security warning.

In case you want to use signatures for your project written in Qt,

configure provides the -signature option. You need to specify the

location of the .pfx file and qmake adds the signing step to the

build rules.

If you need to select a separate signature for a specific project,

or you only want to sign this single project, you can use the 

"SIGNATURE_FILE = foo.pfx" rule inside the project file.

The above decribed rules apply for command line makefiles as well as

Visual Studio projects generated by qmake.

Microsoft usually ships development signatures inside the SDK packages.

You can find them in the Tools subdirectory of the SDK root folder.

Example:

1. calling configure with signing enabled:

configure.exe -platform win32-msvc2005 -xplatform wincewm50pocket-msvc2005

-signature C:\some\path\SDKSamplePrivDeveloper.pfx

2. using pro file to specify signature

[inside .pro file]

...

TARGET = foo

wince*: {

   SIGNATURE_FILE = somepath\customSignature.pfx

}

...