1. CrackBerry Question's Avatar
    I am currently setting up development environments for BB10 apps on Linux workstations, but BB doesn't seem to provide a secure way to verify the integrity of the downloadable Momentics IDE package. The download link to the .run* file they provide here developerDOTblackberryDOTcomSLASHnativeSLASHdownlo ads) is HTTPS protected, but actually just redirects you to an insecure HTTP server. The same is true of the link to the page containing the checksums for the various IDE installers (all the checksums are md5 anyway, which is considered broken for purposes of integrity verification).

    *just a shell script with a binary trailer attached

    I can force use of HTTPS on the download server i am redirected to, but it makes me accept the non-matching certificate from BB's hosting provider (Akamai).

    (The Windows downloads obviously don't have this problem, since MS has their own secure-ish chain-of-trust/code signing process for installers from verified publishers.)

    Am I missing something? Is there some super-secret developers-only link to a either a secure download server or SHA512/PGP/etc. signatures for the Linux IDE installer? Is it worth opening a developer issues ticket?
    03-29-15 01:04 AM
  2. pkcable's Avatar
    You might try asking this question at the BlackBerry Developer Support forums...

    Developer Support Forums - BlackBerry Support Community Forums
    05-21-15 01:16 PM

Similar Threads

  1. How do I move Memos to Z10?
    By Droidophobe in forum BlackBerry 10 OS
    Replies: 9
    Last Post: 04-02-15, 05:59 PM
  2. What I did to get around my double typing issue...
    By jeanholton1 in forum BlackBerry Q10
    Replies: 2
    Last Post: 03-29-15, 11:10 AM
  3. Replies: 2
    Last Post: 03-29-15, 12:47 AM
  4. Reliable Way to Delete Text Messages?
    By Yoox_II in forum BlackBerry 10 OS
    Replies: 2
    Last Post: 03-28-15, 10:46 PM
  5. The Not-Right-Now Network
    By j jam in forum Armchair CEO
    Replies: 1
    Last Post: 03-28-15, 10:27 PM