Should / could / can we save these certificates in the keepass file we
have for QGIS passwords, and which is accessible to all PSC members?
I saved the globalsign ones in it (before we started using letsencrypt).
In that way everybody can ask them via the PSC?
-------- Forwarded Message --------
Subject: Re: [QGIS-Developer] Question about Mac Installer
Date: Sun, 4 Feb 2018 01:38:08 +0200
From: Tim Sutton <[hidden email]>
To: Anita Graser <[hidden email]>
CC: QGIS Developer <[hidden email]>, William
Kyngesburye <[hidden email]>, [hidden email]
(Adding Larry to CC)
Yes I believe one was purchased - perhaps William and Larry can
> On 02 Feb 2018, at 16:50, Anita Graser <[hidden email]
> <mailto:[hidden email]>> wrote:
> On Fri, Feb 2, 2018 at 3:41 PM, William Kyngesburye
> <[hidden email] <mailto:[hidden email]>> wrote:
> I still need to figure out the signing. I'll probably do it for
> v3 release.
> One small hitch I'm thinking about is the separate GDAL Complete -
> I think it would be a bit odd to sign GDAL with a QGIS dev cert,
> so I am considering making a truly all-in-one QGIS, but I really
> want GDAL as a separate package because I use it a lot outside
> QGIS. There is also the external Python 3 that is not signed,
> which I may also bundle in the QGIS app, and additional python
> modules which are not signed. Though loaded as a library to QGIS,
> I don't know if that matters.
> In the end, even if I make an all-in-one QGIS, I'd still have a
> separate GDAL installer for those that need it, which wouldn't be
> signed, along with my Postgres/PostGIS stack (which uses GDAL
> Complete), also not signed. So many users would still need to
> fuss with the macOS security to get that stuff installed and running.
> Shouldn't there be an OSGEO certificate? I remember the discussions
> but not the exact resolution.
collaborate on this since I think Larry has the OSGEO cert.
> QGIS-Developer mailing list
> [hidden email] <mailto:[hidden email]>
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
*Project chair:* QGIS.org <http://QGIS.org>
Visit http://kartoza.com <http://kartoza.com/> to find out about open
Desktop GIS programming services
Geospatial web development
*IRC:* timlinux on #qgis at freenode.net <http://freenode.net>
Qgis-psc mailing list
Attached Message Part (332 bytes) Download Attachment
I believe it is possible to do that - we would need whoever currently holds the certs to create a provisioning profile for each app bundle that we plan to have…..but my knowledge of the process is quite limited so Larry would need to help us here as to how to go about it. But yes I think it is better for the project if we also can hold a central copy of these certs.
QGIS Project Steering Committee Chair
Qgis-psc mailing list
smime.p7s (2K) Download Attachment
|Free forum by Nabble||Edit this page|