Crosswalk Intel XDK experiences

I received again this information from Google, they will remove my app in July if I don't fix it.

I was trying to rebuild my application using Crosswalk 10 but it crashes a lot.

Does anyone have a good solution for this problem?

Thank you!

I contacted google and this is what they sent me..... Would like people at intel to find a way to resolve this as all other crosswalk versions are real slow and horrid performance....

"Thanks for contacting Google Play Developer Support about the security alert you received with regard to using a highly vulnerable version of OpenSSL.

We are aware that some developers who have already updated their apps received this alert in error. We’ve reached out to these developers to update them with correct information regarding their apps. We sincerely apologize for any confusion this may have caused.

If you received an OpenSSL notification email, please check your Developer Console for any apps that display a notification. For apps that display a notification, please migrate the app(s) to an updated version of OpenSSL within 60 days of the email notification you received. Beginning 7/7/15, Google Play will block publishing of any new apps and updates that use older, unsupported versions of OpenSSL (see below for details).

The vulnerabilities were fixed in OpenSSL versions beginning with 1.0.1h, 1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a grep via:

$ unzip -p YourApp.apk | strings | grep "OpenSSL"

To confirm that you’ve upgraded correctly, upload the updated version of the app(s) to the Developer Console and check back after five hours to see that the alert is gone.

For more information about the vulnerability, please see this OpenSSL Security Advisory: https://www.openssl.org/news/secadv_20140605.txt

For other technical questions about managing OpenSSL, please use https://groups.google.com/forum/#!forum ... nssl.users or http://www.stackoverflow.com/questions.

Regards,

Jeff

Google Play Developer Support

Did you know we offer chat support in English? Chat with us from Monday through Friday, 8 am to 5 pm PT by going to https://support.google.com/googleplay/a ... #contact=1"

— (and everyone)

Crosswalk Export: TLDR edition:

I asked Intel. They said "ask Google".

Asked Google. They said "won't fix, ask Crosswalk":

https://code.google.com/p/chromium/issu ... 1430679226

Asked Crosswalk. They said "won't fix, roll your own crosswalk":

https://crosswalk-project.org/jira/browse/XWALK-4158

I asked myself...where do I get the time to do this?

In other news: A fix is on the way...but who knows when:

crosswalk-performance-mega-thread_p913870?#p913870

Meanwhile: Google is sending out conflicting emails to devs with cw7 apps on google play:

intel-xdk-openssl-fixed_t130231

crosswalk-intel-xdk-experiences_p914746?#p914746

Your game is fine. Your game will be taken down.

...Please clarify?

Sorry Dave, we can't do that.

. . . <img src="{SMILIES_PATH}/icon_mad.gif" alt=":x" title="Mad">

This just in: Deploying C2 games to low-end android devices is a freaking nightmare. Always has been, always will be.

I'm throwing in the towel and targeting powerful devices only; CW12 is good enough for that.

Next step: iOS...and start learning Unity. <img src="{SMILIES_PATH}/icon_e_geek.gif" alt=":geek:" title="Geek">

I managed to make the audio work well: put them in the sound folder and marked yes for "pre-loading sounds."It's Working properly now without changing any code.

i dont know its strange that after years of winning about cocoon js, from the day scirra "break out" with them and typically points at xdk as the best solution things get harder for android exports... now cocoon js seems like more solid for export to android..xdk is slower and reading here the comments has many problems too.

last night ludei send me an email entitled "The new Cocoon based on Cordova is coming soon...‏". i always criticize them about performance cause their games (tic tac toe, basketball) are very simple and light weight so it was a reason to run smoothly but now in their email i saw games like "hadron wars" and "firewater cowboy chase" and "Caça Biscoitos" wich are very rich in assets and complicated enough and seems to run flawlessly. maybe after all the xdk "wait and see it will become the best wrapper" is miles away in performance from cocoon js. maybe scirra should reconsider the relationship with them again.

i agree with cocoon js posts that it should be reconsidered for including back in. from all this xdk + crosswalk stuff it's just sad that a good wrapper as cocoon is deprecated. also with upcoming support for cordova and plugins that weren't supported before.. Ashley you really need to reconsider cocoon

Ashley, could you please try to support us to solve these issues?

What would be the solution? Migrate to Cocoon?

People were far more vocal and critical of CocoonJS Canvas+, so I am absolutely in no hurry to go back to supporting that. I think everyone's forgetting it had its own severe issues. We still support other CocoonJS platforms via Cordova support.

Ashley, using Crosswalk 10 our application is crashing a lot.. besides worst performance..

If we keep Crosswalk 7, our app will be banned from Google Play.

How can we fix it?

According to Intel, you can notify Google that your Crosswalk 7 app is actually secure and avoid it being taken down. See: https://software.intel.com/en-us/xdk/article/crosswalk-7-open-ssl-update

[quote:22u6annn]The Chromium team did not rev the Open SSL version, causing Crosswalk to report 1.0.1e. This will cause a false positive in Google's scanner and a warning to upgrade the version of Open SSL in your application. Google does allow you to petition the findings, which we recommend doing. Below is sample text you can use.

This application uses the Crosswalk 7 WebView which is based off of Chromium 36.0.1985.144. This version of Chromium includes the Open SSL fixes found at https://chromium.googlesource.com/chrom ... 25d0b079c3

c5547f07948684f80c4e9c3584

The Chromium team did not rev the Open SSL identifier, so it still reports 1.0.1e as the Open SSL version. You can verify this in the commit log at https://chromium.googlesource.com/chrom ... sl.version

You can find the Crosswalk commit that updates to Chromium 36.0.1985.144 at https://github.com/crosswalk-project/cr ... a3d9e68e05

Thank you

So if we respond to the google play warning email with the quoted text above we should be fine?

I think so, you should try it.

Anonnymitet

some posts ago Ashley was advising using the newest version of Chromium

— (and everyone)

Crosswalk Export: TLDR edition:

I asked Intel. They said "ask Google".

Asked Google. They said "won't fix, ask Crosswalk":

https://code.google.com/p/chromium/issu ... 1430679226

Asked Crosswalk. They said "won't fix, roll your own crosswalk":

https://crosswalk-project.org/jira/browse/XWALK-4158

I asked myself...where do I get the time to do this?

In other news: A fix is on the way...but who knows when:

crosswalk-performance-mega-thread_p913870?#p913870

Meanwhile: Google is sending out conflicting emails to devs with cw7 apps on google play:

intel-xdk-openssl-fixed_t130231

crosswalk-intel-xdk-experiences_p914746?#p914746

Your game is fine. Your game will be taken down.

...Please clarify?

Sorry Dave, we can't do that.

. . . <img src="{SMILIES_PATH}/icon_mad.gif" alt=":x" title="Mad">

This just in: Deploying C2 games to low-end android devices is a freaking nightmare. Always has been, always will be.

I'm throwing in the towel and targeting powerful devices only; CW12 is good enough for that.

Next step: iOS...and start learning Unity. <img src="{SMILIES_PATH}/icon_e_geek.gif" alt=":geek:" title="Geek">

yea im throwing in the towel for android as well gonna focus on ios..... to be honest I had wayyy better of a time with cocoonjs back in the days, may just try getting cocoonjs to work for android again or wait till they add their atomic plugins to their cloud compiler. My games ran on devices with android 2.3 and above a year ago using cocoonjs lol

[quote:33i2l3uu]The Chromium team did not rev the Open SSL version, causing Crosswalk to report 1.0.1e. This will cause a false positive in Google's scanner and a warning to upgrade the version of Open SSL in your application. Google does allow you to petition the findings, which we recommend doing. Below is sample text you can use.

This application uses the Crosswalk 7 WebView which is based off of Chromium 36.0.1985.144. This version of Chromium includes the Open SSL fixes found at https://chromium.googlesource.com/chrom ... 25d0b079c3

c5547f07948684f80c4e9c3584

The Chromium team did not rev the Open SSL identifier, so it still reports 1.0.1e as the Open SSL version. You can verify this in the commit log at https://chromium.googlesource.com/chrom ... sl.version

You can find the Crosswalk commit that updates to Chromium 36.0.1985.144 at https://github.com/crosswalk-project/cr ... a3d9e68e05

Thank you

So if we respond to the google play warning email with the quoted text above we should be fine?

No. I responded with the same text, still received the 60 day removal warning, followed by the mail to ignore the mail before. My app keeps being flagged after all. Solution: Wait for the new CocoonJS which is compatible with Cordova export, then rebuild everything.