digital ID certificate problem with an application

[Guest hitechlawyer]

I've installed a railroad timetable program which works perfectly on my iPAQ, however on the SPV it fails with the comment that the application cannot be executed because it does not contain a digital signature ID with a known certificate. Any hints to circumvent this ?

[Guest muude]

Orange Certification.... You're fu**ed

[Guest Lojt]

Sticky thread in main forum:

http://www.modaco.com/viewtopic.php?t=218

[Guest DJHope]

Yeh not just SPV gonna have this, all smartphone handsets are gonna have this option soon it seems p800 will be next!

[Guest spacemonkey]

But we'll be fine once a quality digital signing process is in place.

The Baltimore system essentially isn't about checking your code or making sure you're not a malicious nutter, all they are doing is verifying that you exist and have a legal company to work through and then giving you a signing certificate (or access to one anyway) so anything you sign can be traced back to you and your company.

For this identification process they are charging you £500 for 75 signed applications (which each update version of an application counts as 1).

Pretty steep considering their just doing some administration and nothing else, but then, this is new territory for developers (at least small scale casual devlopers) and I'm sure more appropriate methods for freeware/shareware developers will become available in the next year or 2.

[Guest Gorskar]

Still, its bettter than going through orange. Supposing one of us was to buy a package and then others could send their applications to that one person (along with some money to pay for the signing) and then it works out a lot cheaper that what orange want!!

[Guest rcraswell]

I've installed a railroad timetable program which works perfectly on my iPAQ

Note that an iPAQ (PPC) program isn't likely to run on a Smartphone anyway. While they're both ARM devices, the OSes are different enough that programs have to be specifically compiled each.

--ron

[Guest spacemonkey]

Still, its bettter than going through orange. Supposing one of us was to buy a package and then others could send their applications to that one person (along with some money to pay for the signing) and then it works out a lot cheaper that what orange want!!

I was thinking much the same.... but before we can really do much dev we need Orange to provide some way to configure a phone for dev use because you don't want to use a sign from baltimore just to put it on an SPV to test it, otherwise the dev of a single app would probably use a full 75 signatures...

[Guest Monolithix [MVP]]

Yeh not just SPV gonna have this, all smartphone handsets are gonna have this option soon it seems p800 will be next!

p800 is sybian os though isnt it?

[Guest spacemonkey]

Yep P800 is Symbian OS but a white paper (posted somewhere on this site) mention digital signing requirements can be implemented at the Operator's discretion. So if the features there you can bet Orange will consider using it.

But at the end of the day if Orange doesn't use signing on the P800 then the question is why are they screwing their SPV customers with a choice one way while leaving P800 customers unscrewed...

[Guest Monolithix [MVP]]

true. shame it had to come about at all. all for our own protection of course...

[Guest Gorskar]

true. shame it had to come about at all. all for our own protection of course...

HA They've just done it so they can get some money from every app that is put on the smatphone, in a control freak kind of way. If they were so concerned about malicious applications they would have only implemented the 2nd tier certification, which will allow unsigned apps to run, but not access the radio stack. This feature IS on the smartphone (according to microsoft) but orange decided to go the whole hog.

I've ordered my Smartphone now, on the hope that this issue will soon be circumvented, and even if it'd not (depressing thought) then for the money it still beats anyting else on the market for features hands-down.

[Guest yatpeak]

Not really, after all, it's not only Orange who can certify apps.

[Guest Monolithix [MVP]]

Or Baltimore/GeoTrust...