DevHeads.net

Signing keys for commercial app stores

Hello,

I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
excellent GSoC students, one working on a MacOS port and one working on
a Windows port, with the end goal of bringing those ports to feature
pairity with our Linux version and doing an official release.

While we could just post our releases to some X.kde.org website and
distribute unsigned binaries, this would not reach as many users as
having them properly signed and released via the offical MacOS and
Windows app stores.

Does anyone have experience with:
A. Windows App Store Releases
B. MacOS App Store Release

Thanks,
Simon

Comments

Re: Signing keys for commercial app stores

By Aleix Pol at 06/10/2019 - 09:36

On Mon, Jun 10, 2019 at 4:03 AM Simon Redman < ... at ergotech dot com> wrote:
We do have experience on Android. Is the story on Windows/Mac all that
different?

Aleix

Re: Signing keys for commercial app stores

By Ben Cooksley at 06/10/2019 - 14:41

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol < ... at kde dot org> wrote:
Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

Cheers,
Ben

Re: Signing keys for commercial app stores

By Jonathan Aquilina at 06/11/2019 - 00:47

First thigns first you need apple hardware to develop on with their Xcode ide im sure to work with it in some way some how to compile what you are working on.

Also if you don’t have mac hardware you can actually rent mini servers with full SSH access from hostmyapple.com

Regards,
Jonathan

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol < ... at kde dot org> wrote:
Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

Cheers,
Ben

Re: Signing keys for commercial app stores

By Jonathan Aquilina at 06/11/2019 - 00:48

Also I forgot to add you need to have a developers subscription to be able to release on the apple app store which is $99 per year but you can release as many apps as you want

Regards
Jonathan

First thigns first you need apple hardware to develop on with their Xcode ide im sure to work with it in some way some how to compile what you are working on.

Also if you don’t have mac hardware you can actually rent mini servers with full SSH access from hostmyapple.com

Regards,
Jonathan

On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" <kde-devel- ... at kde dot org on behalf of ... at kde dot org> wrote:

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol < ... at kde dot org> wrote:
Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

Cheers,
Ben

Re: Signing keys for commercial app stores

By Ben Cooksley at 06/11/2019 - 04:13

On Tue, 11 Jun 2019, 16:48 Jonathan Aquilina, < ... at eagleeyet dot net>
wrote:

Hi Jonathan,

Thanks for those details.

Around 2 years ago we (the KDE e.V) bought an Apple Mac Mini machine so
fortunately hardware isn't an issue here.

That machine is currently connected to the Binary Factory, and produces
nightly unsigned DMG images for various applications.

The only part missing is the Apple Developer ID you mentioned (along with
notarisation)

Cheers,
Ben

Re: Signing keys for commercial app stores

By Jonathan Aquilina at 06/11/2019 - 04:29

Hi Ben i can get a developers account if need be and can push this stuff to the App Store if it helps out.

Regards,
Jonathan

Get Outlook for iOS<https://aka.ms/o0ukef>
On Tue, 11 Jun 2019, 16:48 Jonathan Aquilina, < ... at eagleeyet dot net<mailto: ... at eagleeyet dot net>> wrote:
Also I forgot to add you need to have a developers subscription to be able to release on the apple app store which is $99 per year but you can release as many apps as you want

Hi Jonathan,

Thanks for those details.

Around 2 years ago we (the KDE e.V) bought an Apple Mac Mini machine so fortunately hardware isn't an issue here.

That machine is currently connected to the Binary Factory, and produces nightly unsigned DMG images for various applications.

The only part missing is the Apple Developer ID you mentioned (along with notarisation)

Regards
Jonathan

Cheers,
Ben

First thigns first you need apple hardware to develop on with their Xcode ide im sure to work with it in some way some how to compile what you are working on.

Also if you don’t have mac hardware you can actually rent mini servers with full SSH access from hostmyapple.com<http://hostmyapple.com>

Regards,
Jonathan

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol < ... at kde dot org<mailto: ... at kde dot org>> wrote:
Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

Cheers,
Ben

Re: Signing keys for commercial app stores

By Ben Cooksley at 06/11/2019 - 14:21

On Tue, Jun 11, 2019 at 8:29 PM Jonathan Aquilina
< ... at eagleeyet dot net> wrote:
For those wondering, i've replied to Jonathan off list regarding this.

Cheers,
Ben

Re: Signing keys for commercial app stores

By Ben Cooksley at 06/10/2019 - 05:35

On Mon, Jun 10, 2019 at 2:03 PM Simon Redman < ... at ergotech dot com> wrote:
Hi Simon,

While i'm not 100% familiar with things, for Windows releases at least
we already have substantial tooling and infrastructure in place for
this.

The Binary Factory (binary-factory.kde.org) is capable of generating
both regular signed Windows installers, as well as Windows appx
bundles for uploading to the Windows Store. The KDE e.V. also operates
an official presence (as such) on the Windows which Sysadmin governs
control of.

To get started with these, i'd suggest your Windows student work on
the Craft packaging for KStars. Once that is in place we can look into
delegating access to the Windows Store to one of the KStars team to
allow you to submit KStars there (along with updates as needed)

With regards to MacOS, due to how Apple manages this we have no
official option for signing or making releases on the Apple Store at
this time.

Given that an Apple Developer ID is required at minimum for signing
applications, and with an impending change to require applications be
notarised by Apple in future versions of MacOS (will be enforced from
Catalina onwards), it is unlikely we'll be making a change to this (as
there is no benefit to us having the Binary Factory sign apps when
they need to be notaised for users to run them without having to jump
through hoops - we may as well ship them unsigned).

Regards,
Ben

Re: Signing keys for commercial app stores

By Simon Redman at 06/10/2019 - 14:34

Thank you for the advice Ben. I have passed it along to my students. It
looks like Windows will be basically no problem, but the Apple store
might give us trouble. I'll try to remember to update this thread with
what we find out!

Thanks,
Simon

On 6/10/19 3:35 AM, Ben Cooksley wrote: