Re: Signing keys for commercial app stores

2019-06-11 Thread Ben Cooksley
On Tue, Jun 11, 2019 at 8:29 PM Jonathan Aquilina
 wrote:
>
> Hi Ben i can get a developers account if need be and can push this stuff to 
> the App Store if it helps out.

For those wondering, i've replied to Jonathan off list regarding this.

Cheers,
Ben

>
> Regards,
> Jonathan
>
> Get Outlook for iOS
> 
> From: kde-devel  on behalf of Ben Cooksley 
> 
> Sent: Tuesday, June 11, 2019 10:13:31 AM
> To: kde-devel
> Subject: Re: Signing keys for commercial app stores
>
> On Tue, 11 Jun 2019, 16:48 Jonathan Aquilina,  wrote:
>>
>> Also I forgot to add you need to have a developers subscription to be able 
>> to release on the apple app store which is $99 per year but you can release 
>> as many apps as you want
>
>
> Hi Jonathan,
>
> Thanks for those details.
>
> Around 2 years ago we (the KDE e.V) bought an Apple Mac Mini machine so 
> fortunately hardware isn't an issue here.
>
> That machine is currently connected to the Binary Factory, and produces 
> nightly unsigned DMG images for various applications.
>
> The only part missing is the Apple Developer ID you mentioned (along with 
> notarisation)
>
>>
>> Regards
>> Jonathan
>
>
> Cheers,
> Ben
>
>>
>> On 11/06/2019, 06:47, "Jonathan Aquilina"  wrote:
>>
>> First thigns first you need apple hardware to develop on with their 
>> Xcode ide im sure to work with it in some way some how to compile what you 
>> are working on.
>>
>> Also if you don’t have mac hardware you can actually rent mini servers 
>> with full SSH access from hostmyapple.com
>>
>> Regards,
>> Jonathan
>>
>> On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" 
>>  wrote:
>>
>> On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol  wrote:
>> >
>> > On Mon, Jun 10, 2019 at 4:03 AM Simon Redman  
>> wrote:
>> > >
>> > > Hello,
>> > >
>> > > I am Simon, and I work on KDE Connect. This summer, KDE Connect 
>> has two
>> > > excellent GSoC students, one working on a MacOS port and one 
>> working on
>> > > a Windows port, with the end goal of bringing those ports to 
>> feature
>> > > pairity with our Linux version and doing an official release.
>> > >
>> > > While we could just post our releases to some X.kde.org website 
>> and
>> > > distribute unsigned binaries, this would not reach as many users 
>> as
>> > > having them properly signed and released via the offical MacOS 
>> and
>> > > Windows app stores.
>> > >
>> > > Does anyone have experience with:
>> > > A. Windows App Store Releases
>> > > B. MacOS App Store Release
>> >
>> > We do have experience on Android. Is the story on Windows/Mac all 
>> that
>> > different?
>>
>> Windows is essentially a solved problem. Mac on the other hand isn't
>> really solvable.
>>
>> >
>> > Aleix
>>
>> Cheers,
>> Ben
>>
>>
>>
>>


Re: Signing keys for commercial app stores

2019-06-11 Thread Jonathan Aquilina
Hi Ben i can get a developers account if need be and can push this stuff to the 
App Store if it helps out.

Regards,
Jonathan

Get Outlook for iOS<https://aka.ms/o0ukef>

From: kde-devel  on behalf of Ben Cooksley 

Sent: Tuesday, June 11, 2019 10:13:31 AM
To: kde-devel
Subject: Re: Signing keys for commercial app stores

On Tue, 11 Jun 2019, 16:48 Jonathan Aquilina, 
mailto:jaquil...@eagleeyet.net>> wrote:
Also I forgot to add you need to have a developers subscription to be able to 
release on the apple app store which is $99 per year but you can release as 
many apps as you want

Hi Jonathan,

Thanks for those details.

Around 2 years ago we (the KDE e.V) bought an Apple Mac Mini machine so 
fortunately hardware isn't an issue here.

That machine is currently connected to the Binary Factory, and produces nightly 
unsigned DMG images for various applications.

The only part missing is the Apple Developer ID you mentioned (along with 
notarisation)


Regards
Jonathan

Cheers,
Ben


On 11/06/2019, 06:47, "Jonathan Aquilina" 
mailto:jaquil...@eagleeyet.net>> wrote:

First thigns first you need apple hardware to develop on with their Xcode 
ide im sure to work with it in some way some how to compile what you are 
working on.

Also if you don’t have mac hardware you can actually rent mini servers with 
full SSH access from hostmyapple.com<http://hostmyapple.com>

Regards,
Jonathan

On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" 
mailto:kde-devel-boun...@kde.org> on behalf of 
bcooks...@kde.org<mailto:bcooks...@kde.org>> wrote:

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol 
mailto:aleix...@kde.org>> wrote:
>
> On Mon, Jun 10, 2019 at 4:03 AM Simon Redman 
mailto:si...@ergotech.com>> wrote:
> >
> > Hello,
> >
> > I am Simon, and I work on KDE Connect. This summer, KDE Connect has 
two
> > excellent GSoC students, one working on a MacOS port and one 
working on
> > a Windows port, with the end goal of bringing those ports to feature
> > pairity with our Linux version and doing an official release.
> >
> > While we could just post our releases to some 
X.kde.org<http://X.kde.org> website and
> > distribute unsigned binaries, this would not reach as many users as
> > having them properly signed and released via the offical MacOS and
> > Windows app stores.
> >
> > Does anyone have experience with:
> > A. Windows App Store Releases
> > B. MacOS App Store Release
>
> We do have experience on Android. Is the story on Windows/Mac all that
> different?

Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

>
> Aleix

Cheers,
Ben






Re: Signing keys for commercial app stores

2019-06-11 Thread Ben Cooksley
On Tue, 11 Jun 2019, 16:48 Jonathan Aquilina, 
wrote:

> Also I forgot to add you need to have a developers subscription to be able
> to release on the apple app store which is $99 per year but you can release
> as many apps as you want
>

Hi Jonathan,

Thanks for those details.

Around 2 years ago we (the KDE e.V) bought an Apple Mac Mini machine so
fortunately hardware isn't an issue here.

That machine is currently connected to the Binary Factory, and produces
nightly unsigned DMG images for various applications.

The only part missing is the Apple Developer ID you mentioned (along with
notarisation)


> Regards
> Jonathan
>

Cheers,
Ben


> On 11/06/2019, 06:47, "Jonathan Aquilina" 
> wrote:
>
> First thigns first you need apple hardware to develop on with their
> Xcode ide im sure to work with it in some way some how to compile what you
> are working on.
>
> Also if you don’t have mac hardware you can actually rent mini servers
> with full SSH access from hostmyapple.com
>
> Regards,
> Jonathan
>
> On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" <
> kde-devel-boun...@kde.org on behalf of bcooks...@kde.org> wrote:
>
> On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol 
> wrote:
> >
> > On Mon, Jun 10, 2019 at 4:03 AM Simon Redman 
> wrote:
> > >
> > > Hello,
> > >
> > > I am Simon, and I work on KDE Connect. This summer, KDE
> Connect has two
> > > excellent GSoC students, one working on a MacOS port and one
> working on
> > > a Windows port, with the end goal of bringing those ports to
> feature
> > > pairity with our Linux version and doing an official release.
> > >
> > > While we could just post our releases to some X.kde.org
> website and
> > > distribute unsigned binaries, this would not reach as many
> users as
> > > having them properly signed and released via the offical MacOS
> and
> > > Windows app stores.
> > >
> > > Does anyone have experience with:
> > > A. Windows App Store Releases
> > > B. MacOS App Store Release
> >
> > We do have experience on Android. Is the story on Windows/Mac
> all that
> > different?
>
> Windows is essentially a solved problem. Mac on the other hand
> isn't
> really solvable.
>
> >
> > Aleix
>
> Cheers,
> Ben
>
>
>
>
>


Re: Signing keys for commercial app stores

2019-06-10 Thread Jonathan Aquilina
Also I forgot to add you need to have a developers subscription to be able to 
release on the apple app store which is $99 per year but you can release as 
many apps as you want

Regards
Jonathan

On 11/06/2019, 06:47, "Jonathan Aquilina"  wrote:

First thigns first you need apple hardware to develop on with their Xcode 
ide im sure to work with it in some way some how to compile what you are 
working on.

Also if you don’t have mac hardware you can actually rent mini servers with 
full SSH access from hostmyapple.com

Regards,
Jonathan

On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" 
 wrote:

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol  wrote:
>
> On Mon, Jun 10, 2019 at 4:03 AM Simon Redman  
wrote:
> >
> > Hello,
> >
> > I am Simon, and I work on KDE Connect. This summer, KDE Connect has 
two
> > excellent GSoC students, one working on a MacOS port and one 
working on
> > a Windows port, with the end goal of bringing those ports to feature
> > pairity with our Linux version and doing an official release.
> >
> > While we could just post our releases to some X.kde.org website and
> > distribute unsigned binaries, this would not reach as many users as
> > having them properly signed and released via the offical MacOS and
> > Windows app stores.
> >
> > Does anyone have experience with:
> > A. Windows App Store Releases
> > B. MacOS App Store Release
>
> We do have experience on Android. Is the story on Windows/Mac all that
> different?

Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

>
> Aleix

Cheers,
Ben






Re: Signing keys for commercial app stores

2019-06-10 Thread Jonathan Aquilina
First thigns first you need apple hardware to develop on with their Xcode ide 
im sure to work with it in some way some how to compile what you are working on.

Also if you don’t have mac hardware you can actually rent mini servers with 
full SSH access from hostmyapple.com

Regards,
Jonathan

On 10/06/2019, 20:41, "kde-devel on behalf of Ben Cooksley" 
 wrote:

On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol  wrote:
>
> On Mon, Jun 10, 2019 at 4:03 AM Simon Redman  wrote:
> >
> > Hello,
> >
> > I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
> > excellent GSoC students, one working on a MacOS port and one working on
> > a Windows port, with the end goal of bringing those ports to feature
> > pairity with our Linux version and doing an official release.
> >
> > While we could just post our releases to some X.kde.org website and
> > distribute unsigned binaries, this would not reach as many users as
> > having them properly signed and released via the offical MacOS and
> > Windows app stores.
> >
> > Does anyone have experience with:
> > A. Windows App Store Releases
> > B. MacOS App Store Release
>
> We do have experience on Android. Is the story on Windows/Mac all that
> different?

Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

>
> Aleix

Cheers,
Ben




Re: Signing keys for commercial app stores

2019-06-10 Thread Ben Cooksley
On Tue, Jun 11, 2019 at 1:37 AM Aleix Pol  wrote:
>
> On Mon, Jun 10, 2019 at 4:03 AM Simon Redman  wrote:
> >
> > Hello,
> >
> > I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
> > excellent GSoC students, one working on a MacOS port and one working on
> > a Windows port, with the end goal of bringing those ports to feature
> > pairity with our Linux version and doing an official release.
> >
> > While we could just post our releases to some X.kde.org website and
> > distribute unsigned binaries, this would not reach as many users as
> > having them properly signed and released via the offical MacOS and
> > Windows app stores.
> >
> > Does anyone have experience with:
> > A. Windows App Store Releases
> > B. MacOS App Store Release
>
> We do have experience on Android. Is the story on Windows/Mac all that
> different?

Windows is essentially a solved problem. Mac on the other hand isn't
really solvable.

>
> Aleix

Cheers,
Ben


Re: Signing keys for commercial app stores

2019-06-10 Thread Simon Redman
Thank you for the advice Ben. I have passed it along to my students. It
looks like Windows will be basically no problem, but the Apple store
might give us trouble. I'll try to remember to update this thread with
what we find out!

Thanks,
Simon

On 6/10/19 3:35 AM, Ben Cooksley wrote:
> On Mon, Jun 10, 2019 at 2:03 PM Simon Redman  wrote:
>> Hello,
> Hi Simon,
>
>> I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
>> excellent GSoC students, one working on a MacOS port and one working on
>> a Windows port, with the end goal of bringing those ports to feature
>> pairity with our Linux version and doing an official release.
>>
>> While we could just post our releases to some X.kde.org website and
>> distribute unsigned binaries, this would not reach as many users as
>> having them properly signed and released via the offical MacOS and
>> Windows app stores.
>>
>> Does anyone have experience with:
>> A. Windows App Store Releases
>> B. MacOS App Store Release
>>
> While i'm not 100% familiar with things, for Windows releases at least
> we already have substantial tooling and infrastructure in place for
> this.
>
> The Binary Factory (binary-factory.kde.org) is capable of generating
> both regular signed Windows installers, as well as Windows appx
> bundles for uploading to the Windows Store. The KDE e.V. also operates
> an official presence (as such) on the Windows which Sysadmin governs
> control of.
>
> To get started with these, i'd suggest your Windows student work on
> the Craft packaging for KStars. Once that is in place we can look into
> delegating access to the Windows Store to one of the KStars team to
> allow you to submit KStars there (along with updates as needed)
>
> With regards to MacOS, due to how Apple manages this we have no
> official option for signing or making releases on the Apple Store at
> this time.
>
> Given that an Apple Developer ID is required at minimum for signing
> applications, and with an impending change to require applications be
> notarised by Apple in future versions of MacOS (will be enforced from
> Catalina onwards), it is unlikely we'll be making a change to this (as
> there is no benefit to us having the Binary Factory sign apps when
> they need to be notaised for users to run them without having to jump
> through hoops - we may as well ship them unsigned).
>
>> Thanks,
>> Simon
> Regards,
> Ben



Re: Signing keys for commercial app stores

2019-06-10 Thread Aleix Pol
On Mon, Jun 10, 2019 at 4:03 AM Simon Redman  wrote:
>
> Hello,
>
> I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
> excellent GSoC students, one working on a MacOS port and one working on
> a Windows port, with the end goal of bringing those ports to feature
> pairity with our Linux version and doing an official release.
>
> While we could just post our releases to some X.kde.org website and
> distribute unsigned binaries, this would not reach as many users as
> having them properly signed and released via the offical MacOS and
> Windows app stores.
>
> Does anyone have experience with:
> A. Windows App Store Releases
> B. MacOS App Store Release

We do have experience on Android. Is the story on Windows/Mac all that
different?

Aleix


Re: Signing keys for commercial app stores

2019-06-10 Thread Ben Cooksley
On Mon, Jun 10, 2019 at 2:03 PM Simon Redman  wrote:
>
> Hello,

Hi Simon,

>
> I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
> excellent GSoC students, one working on a MacOS port and one working on
> a Windows port, with the end goal of bringing those ports to feature
> pairity with our Linux version and doing an official release.
>
> While we could just post our releases to some X.kde.org website and
> distribute unsigned binaries, this would not reach as many users as
> having them properly signed and released via the offical MacOS and
> Windows app stores.
>
> Does anyone have experience with:
> A. Windows App Store Releases
> B. MacOS App Store Release
>

While i'm not 100% familiar with things, for Windows releases at least
we already have substantial tooling and infrastructure in place for
this.

The Binary Factory (binary-factory.kde.org) is capable of generating
both regular signed Windows installers, as well as Windows appx
bundles for uploading to the Windows Store. The KDE e.V. also operates
an official presence (as such) on the Windows which Sysadmin governs
control of.

To get started with these, i'd suggest your Windows student work on
the Craft packaging for KStars. Once that is in place we can look into
delegating access to the Windows Store to one of the KStars team to
allow you to submit KStars there (along with updates as needed)

With regards to MacOS, due to how Apple manages this we have no
official option for signing or making releases on the Apple Store at
this time.

Given that an Apple Developer ID is required at minimum for signing
applications, and with an impending change to require applications be
notarised by Apple in future versions of MacOS (will be enforced from
Catalina onwards), it is unlikely we'll be making a change to this (as
there is no benefit to us having the Binary Factory sign apps when
they need to be notaised for users to run them without having to jump
through hoops - we may as well ship them unsigned).

> Thanks,
> Simon

Regards,
Ben


Signing keys for commercial app stores

2019-06-09 Thread Simon Redman
Hello,

I am Simon, and I work on KDE Connect. This summer, KDE Connect has two
excellent GSoC students, one working on a MacOS port and one working on
a Windows port, with the end goal of bringing those ports to feature
pairity with our Linux version and doing an official release.

While we could just post our releases to some X.kde.org website and
distribute unsigned binaries, this would not reach as many users as
having them properly signed and released via the offical MacOS and
Windows app stores.

Does anyone have experience with:
A. Windows App Store Releases
B. MacOS App Store Release

Thanks,
Simon