[
https://issues.apache.org/jira/browse/SIS-181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Martin Desruisseaux closed SIS-181.
-----------------------------------
Resolution: Won't Fix
> Use Apache code signing service for SIS releases
> ------------------------------------------------
>
> Key: SIS-181
> URL: https://issues.apache.org/jira/browse/SIS-181
> Project: Spatial Information Systems
> Issue Type: Improvement
> Components: Build process
> Reporter: Martin Desruisseaux
> Priority: Minor
>
> The Apache Foundation now provide a code signing service. The Apache SIS
> project should consider using it for their releases. Instructions are there:
> * [Blog: Code signing service now
> available|https://blogs.apache.org/infra/entry/code_signing_service_now_available]
> * [Requesting Access to the Code signing
> service|https://reference.apache.org/pmc/newcodesigning]
> * [Using the code signing
> service|https://reference.apache.org/pmc/codesigning]
> However given that code signing cost money to the ASF, probably the Apache
> SIS project is not big enough for this cost. Cost signing is used by bigger
> projects like Apache Tomcat; maybe we should wait for more experience gained
> by those big projects.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)