Re: [Bf-committers] Vendor Approval Issue

2014-11-09 Thread Martijn Berger
Hi everyone. I think this is a great idea. I would like to propose the following steps. 1) We put in place the infrastructure 2) We use a self signed certificate ( blender foundation CA ) to sign our buildbot builds and installers. 3) We buy / beg an official certificate to the signing. This

Re: [Bf-committers] Vendor Approval Issue

2014-11-09 Thread Sergey Sharybin
Sounds like a plan to me. Do we have volunteers to implement this? :) On Sun, Nov 9, 2014 at 8:29 PM, Martijn Berger martijn.ber...@gmail.com wrote: Hi everyone. I think this is a great idea. I would like to propose the following steps. 1) We put in place the infrastructure 2) We use a

Re: [Bf-committers] Vendor Approval Issue

2014-11-09 Thread Martijn Berger
Hi Sergey-, You mind making a Blender Institute CA if we don't have one. Ill send you a certificate signing request for a code signing certificate. So I can make the proof of concept happen. Martijn On Sun, Nov 9, 2014 at 4:31 PM, Sergey Sharybin sergey@gmail.com wrote: Sounds like a

Re: [Bf-committers] Vendor Approval Issue

2014-11-09 Thread Sergey Sharybin
Hrm, think it should be BF CA cert? On Sun, Nov 9, 2014 at 8:36 PM, Martijn Berger martijn.ber...@gmail.com wrote: Hi Sergey-, You mind making a Blender Institute CA if we don't have one. Ill send you a certificate signing request for a code signing certificate. So I can make the proof of

Re: [Bf-committers] Vendor Approval Issue

2014-11-06 Thread Ton Roosendaal
Hi, I don't mind paying a bit, for as long it's an undisputed, official cert recommended by Microsoft. -Ton- Ton Roosendaal - t...@blender.org - www.blender.org Chairman Blender Foundation - Producer Blender Institute Entrepotdok

Re: [Bf-committers] Vendor Approval Issue

2014-11-06 Thread Dan McGrath
Hey Ton, Well, the cert is just like any other SSL/x.509 certificate you would get, except the properties of the certificate allow (limit) it to be used specifically for signing code. You can get certs that can be set to only be used for email, signing or encryption etc. The thing that makes this