Modify

Opened 13 months ago

Last modified 7 days ago

#14117 reopened enhancement

Correct signature for macOS application and/or App Store

Reported by: putnik Owned by: team
Priority: normal Milestone:
Component: Installer MacOS Version:
Keywords: macosx usa Cc: Stereo

Description

Is it possible to sign JOSM application correctly and add it to App Store?

JOSM is the only application that I have to download every time manually for the update. Since macOS Sierra I also have to disable security settings each time. It is very uncomfortable. Less experienced users just do not understand that it is necessary to do, and decide that JOSM does not work.

If Apple rules allow, at least, I would like to see the application has been correctly signed. And even better, to have been added to the App Store.

For my part, I can donate $99 to the developer subscription to Apple, to get the correct certificate.

Also posted here: https://forum.openstreetmap.org/viewtopic.php?id=56694

Attachments (0)

Change History (22)

comment:1 Changed 13 months ago by stoecker

What's the certificate lifetime?

If we offer a new service, we also need to think about what to do on next renewal, as very likely we will not step back from what we have ATM.

Can you link to information about what it needs?

comment:2 Changed 13 months ago by putnik

I was sure that I had the Sierra, but it turned out that it was El Capitan. I updated now, and in the new version there is no way to open programs from unknown developers by default.

To enable it you need to google, find magic console command with sudo, run it, than disable all checks in preferences, and only after this you can run JOSM for first time. Probably, there is no way to make the situation even worse.

Probably, this is the correct link, but I'm not a macOS developer: https://developer.apple.com/library/content/documentation/Security/Conceptual/CodeSigningGuide/Introduction/Introduction.html

comment:3 in reply to:  1 ; Changed 13 months ago by Klumbumbus

Replying to stoecker:

What's the certificate lifetime?

Seems 1 year.

If we offer a new service, we also need to think about what to do on next renewal

If we really need this certificate then there is a page in the osm wiki (which I can't find anymore atm) where you can requst financial support for osm related projects. (I think it is from the OSMF.) I'm pretty sure this would be accepted as the other supported projects often requst 10 or 100 times more money than these 99$.

comment:5 Changed 13 months ago by stoecker

I now got an AppleID for JOSM and asked them if they have special conditions for free-of-charge OpenSource projects.

comment:6 Changed 13 months ago by andygol

user$ brew cask install josm

Run this ☝️ command in terminal 🖥 and all your troubles concerning JOSM installation on macOS will be gone

more details - https://caskroom.github.io/

comment:7 Changed 13 months ago by Don-vip

Setup file is quite simple, maybe we should document this as a supported installation method.

comment:8 Changed 13 months ago by stoecker

Hmm, I got a response from Apple developers support, that they aren't responsible for my request. They say to contact http://www.apple.com/ie/marcom/, but from them I only get an automatic answer, but no follow-up to that.

comment:9 in reply to:  3 Changed 12 months ago by Klumbumbus

Replying to Klumbumbus:

there is a page in the osm wiki (which I can't find anymore atm) where you can requst financial support for osm related projects.

Found it. (was searching in the wrong wiki): https://www.fossgis.de/wiki/F%C3%B6rderantr%C3%A4ge

comment:10 Changed 12 months ago by stoecker

I tried again to reach Apple, but till now had no success. The developer support does not know of an OpenSource sponsoring. The marketing department did not answer.

While FOSSGIS could be an option actually I personally dislike this. Apple adds some checks and now each non-profit project has to pay 100€ a year to deliver free software. I don't want to support that model really.

comment:11 Changed 11 months ago by bastiK

According to the wikipedia page, Apple does not allow free software licensed under GPL in the app store. Not sure if it would work to just have Apple sign the app, but it feels like being taken for a fool to pay them 100€ annually but still being excluded from the store.

comment:12 Changed 11 months ago by Don-vip

We should ask VLC. They got a long history with Apple. It appears to be on App Store but I can't find it on Mac Store. Also it is not clear if they are still using GPL license or completely switched to LGPL.

comment:13 Changed 11 months ago by Stereo

Cc: Stereo added
Keywords: macosx added

comment:14 Changed 11 months ago by Stereo

I've added a workaround to the Documentation: To open JOSM for the first time, right-click on JOSM.app and confirm the opening in the pop-up dialogs. This is only necessary on the first run of JOSM.

I only ever update josm-tested.jar partly for this reason - as far as I can tell, it's JOSM.app/Contents/MacOS/JOSM that gets signed, and that runner wrapper never changes, does it? We could pay a one-off $100 fee, or have a friendly developer sign that for us, and live happy ever after?

comment:15 Changed 10 months ago by stoecker

Resolution: wontfix
Status: newclosed

Seems Apple doesn't like OpenSource and I don't like to support that. Mac users will have to live with an unsigned app until Apple completely forbids to install free software.

comment:16 Changed 7 days ago by Klumbumbus

It seems the $100 per year was removed for nonprofit organizations. https://developer.apple.com/news/?id=01032018a I don't know if this changes the status of this ticket or if there are still other barriers like our license.

comment:17 Changed 7 days ago by Don-vip

There are restrictions:

if you’re a nonprofit organization, accredited educational institution, or government entity based in the United States that will distribute only free apps on the App Store.

We could probably distribute JOSM on the mac Store through OSM US.

comment:18 Changed 7 days ago by Don-vip

Keywords: usa added
Resolution: wontfix
Status: closedreopened

comment:19 in reply to:  17 Changed 7 days ago by Klumbumbus

Replying to Don-vip:

There are restrictions:

if you’re a nonprofit organization, accredited educational institution, or government entity based in the United States that will distribute only free apps on the App Store.

We could probably distribute JOSM on the mac Store through OSM US.

The sentence is not clear if "based in the united states" belongs to all three or only to the third item of the list.

comment:20 Changed 7 days ago by Don-vip

The details page also states "Fee waivers for other countries will be added as they become available." so I guess this is only for US-based entities.

comment:21 Changed 7 days ago by Klumbumbus

ah, ok

comment:22 Changed 7 days ago by Don-vip

I have asked them if fee waivers are coming for the EU, especially for France and Germany. They should answer in 1 business day.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as reopened The owner will remain team.
as The resolution will be set.
to The owner will be changed from team to the specified user.
The owner will change to putnik
as duplicate The resolution will be set to duplicate.The specified ticket will be cross-referenced with this ticket

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.