FAQ-1265 Why do I get an IAP dialog when I try to install my application?


FAQ-1265 Why do I get an IAP dialog when I try to install my application?

» Symbian OS » Developer Knowledgebase » FAQ-1265

Classification:	General	Category:	Symbian Signed
Created:	04/20/2005	Modified:	04/29/2005
Number:	FAQ-1265
Platform:	Not Applicable

Question:
What is an OCSP revocation check and can I disable it?
Why do I get an IAP dialog when I try to install my applicationand why does my phone try to connect when I install a signed application?
Will I be billed for the connection and, if so, how much does the connection cost?
What happens if I don't acknowledge the IAP connection dialog, or cannot otherwise connect?

Answer:
What is an OCSP revocation check?
A signed application has a unique identity.
Online Certificate Status Protocol (OCSP) provides a mechanism whereby this unique identity can be checked to verify if the signed application has been revoked. Due to the memory limitations on phones, the use of an online revocation status check means that the Certificate Revocation List (CRL) of revoked applications does not need to be stored and maintained on the device.

The check is run as part of the install process if OCSP is enabled on a phone.

Note that in the case of a SymbianSigned application, this unique identity is applied when the application is signed using the ACS Content ID (that chains to the "Symbian B" CA certificate - see FAQ 1229).

OCSP is defined in IEEE RFC 2560.

Can I disable the revocation check?
No. The revocation behaviour is set by the device manufacturer, usually according to requirements that have been pre-defined by network operators.

Why do I get an IAP dialog when I try to install my application and why does my phone try to connect when I install a signed application?
The phone requires a connection to the Internet to make OCSP checks. On phones where OCSP is enabled and if an IAP has not already been created, the connection attempt will trigger a dialog asking the user to select a IAP to use for the connection.

Will I be billed for the connection and, if so, how much does the connection cost?
The cost of any data transaction will depend on your operator, your tariff and the IAP selected. You can find out more information on the billing model from your operator.

What happens if I don't acknowledge the IAP connection dialog, or cannot otherwise connect?
Symbian's Recommended Practice suggests that if revocation checking is enabled and the revocation check cannot be made (for any reason) then the application's revocation status is considered to be unknown. The user will be prompted that this is the case and given the option to proceed with the installation or not. Prompts and implementations may vary across device manufacturers.