Home Products Services Company Developer Connection
Applied Informatics

Developer Connection

Archive for May, 2009

POCO Platform 2009.1 Evaluation Packages Available

Evaluation packages for the latest 2009.1 release of the POCO Platform are now available for download. We have versions for Windows (Visual Studio 2005 and 2008), Linux (Ubuntu and RedHat/CentOS) and Mac OS X, with a few more to follow in the coming weeks.

Quick Start Guide

A new Quick Start Guide (PDF) for developers using the POCO Platform is available. This guide contains valuable information for first time POCO Platform users, including an overview of the POCO Platform, a guide to building the POCO Platform libraries and tools from the delivered source code, and tips for working effectively with the software. The document is still preliminary and a work-in-progress, but nevertheless quite useful already.

POCO Platform 2009.1 Available

The 2009.1 release of the POCO Platform has been completed today. This release is based on the POCO C++ Libraries 1.3.5 release and features significant improvements to Remoting and OSP. Among the new features are improved integration of Remoting into OSP, a new OSP Shell service and support for signed bundles in OSP. Last but not least the documentation has been greately improved.

Customers will be able to download the source code for the new release starting tomorrow. Links to our new download site will be emailed out individually to each customer.

A new evaluation version containing the new features will be available next week.

POCO Platform 2009.1 Preview Part 3: OSP Bundle Signing

The new Open Service Platform release in 2009.1 includes a new feature: signed bundles. It is now possible to digitally sign a bundle with an X.509 certificate, using an RSA-SHA1 signature.

Digitally signed bundles offer the following features:

  • A signed bundle allows to confirm the author of the bundle, through the author’s digital (public key) certificate.
  • A signed bundle guarantees that its contents have not been modified since the bundle was signed.

The two main uses for signed bundles in an OSP based applications are:

  • allowing only bundles from certain well-known and trusted sources being loaded into the application, and
  • preventing end users from tampering with the contents of bundles.

It must be stated that a signed bundle is not an encrypted bundle. All files stored in a signed bundle are unencrypted (unless they have been encrypted by application-specific means), and thus readable for everyone.

Signed bundles in OSP are in concept very similar to signed JAR files used by Java. Some implementation details are different, though, and the formats are not compatible.

Support for signed bundles in OSP is implemented in the OSPBundleSign library (namespace Poco::OSP::BundleSign). The signbundle tool is used to sign a bundle, or verify the signature of a bundle.

For more information about this feature, please see the documentation.

Improved POCO Platform Documentation

With the upcoming 2009.1 release of the POCO Platform, we have also started the Documentation Improvement Project with the goal — as the project name implies — to improve and extend the available documentation for the POCO Platform. We have started with the new Remoting documentation. Writing good documentation takes a lot of time, as any developer knows, but over the coming weeks and months we will work on the documentation for other parts of the POCO Platform, as well as for the POCO C++ Libraries as well.

You can check out the new documentation at docs.appinf.com.