Re: Code signing available for OpenOffice
Which steps have to be taken to activate the process for OpenOffice? And who can initiate this activity? Can I do this? Thanks for the support. All the best Peter Mark Thomas schrieb am Di., 11. Okt. 2016, 14:04: > On 10/10/2016 22:34, Andrea Pescetti wrote: > > Jim Jagielski wrote: > >>> On Oct 10, 2016, at 2:03 AM, Mark Thomas wrote: > >>> We have separate a service for the Apple app store (and another for > >>> the Google app store). > >> Could you provide some info (or a pointer to info) regarding the > >> App-store > >> service, how it works, how to request access, etc.. > > > > Note that the current priority (in case this makes any difference) is to > > get a valid signature that will be recognized by Gatekeeper. This is > > probably a prerequisite for the App Store, but for the App Store we > > would probably need further code changes that may come at a later stage. > > I don't think it makes a difference at this point. Access to the ASF's > Apple developer account where we have a signing key for production > applications is governed by the same process. > > Note you have the option of using the existing ASF-wide ID to sign the > app or creating a specific OpenOffice ID. > > Regards, > > Mark > > > - > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org > For additional commands, e-mail: dev-h...@openoffice.apache.org > > -- Disclaimer: Diese Nachricht stammt aus einem Google Account. Ihre Antwort wird in der Google Cloud Gespeichert und durch Google Algorythmen zwecks werbeanaöysen gescannt. Es ist derzeit nicht auszuschließen das ihre Nachricht auch durch einen NSA Mitarbeiter geprüft wird. Durch kommunikation mit diesen Account stimmen Sie zu das ihre Mail, ihre Kontaktdaten und die Termine die Sie mit mir vereinbaren online zu Google konditionen in der Googlecloud gespeichert wird. Sollten sie dies nicht wünschen kontaktieren sie mich bitte Umgehend um z.B. alternativen zu verhandeln.
Re: Code signing available for OpenOffice
On 10/10/2016 22:34, Andrea Pescetti wrote: > Jim Jagielski wrote: >>> On Oct 10, 2016, at 2:03 AM, Mark Thomas wrote: >>> We have separate a service for the Apple app store (and another for >>> the Google app store). >> Could you provide some info (or a pointer to info) regarding the >> App-store >> service, how it works, how to request access, etc.. > > Note that the current priority (in case this makes any difference) is to > get a valid signature that will be recognized by Gatekeeper. This is > probably a prerequisite for the App Store, but for the App Store we > would probably need further code changes that may come at a later stage. I don't think it makes a difference at this point. Access to the ASF's Apple developer account where we have a signing key for production applications is governed by the same process. Note you have the option of using the existing ASF-wide ID to sign the app or creating a specific OpenOffice ID. Regards, Mark - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
Hi Larry, Do you mean if we currently sign our binaries or if we are able to sign a binary file? All the best Peter Larry Gusaas schrieb am Mo., 10. Okt. 2016, 23:39: > > > On 2016-10-10, 12:03 AM Mark Thomas wrote: > > On 9 October 2016 20:21:32 BST, Andrea Pescetti > wrote: > >> Coming back to this discussion based on recent conversations on the > >> OpenOffice dev list: does the Symantec code signing apply to Windows > >> only, or is it relevant to Mac OS X (and Gatekeeper) too? > > The Symantec service covers Windows binaries and Java JARs. > > > > We have separate a service for the Apple app store (and another for the > Google app store). > > Is there a signing service for downloads from the OpenOffice website? > Signing service for the Apple app store is kind-of pointless to this point > in time since Apache > OpenOffice is not available on the app store. > > > -- > _ > > Larry I. Gusaas > Moose Jaw, Saskatchewan Canada > Website: http://larry-gusaas.com > "An artist is never ahead of his time but most people are far behind > theirs." - Edgard Varese > > > > - > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org > For additional commands, e-mail: dev-h...@openoffice.apache.org > > -- Disclaimer: Diese Nachricht stammt aus einem Google Account. Ihre Antwort wird in der Google Cloud Gespeichert und durch Google Algorythmen zwecks werbeanaöysen gescannt. Es ist derzeit nicht auszuschließen das ihre Nachricht auch durch einen NSA Mitarbeiter geprüft wird. Durch kommunikation mit diesen Account stimmen Sie zu das ihre Mail, ihre Kontaktdaten und die Termine die Sie mit mir vereinbaren online zu Google konditionen in der Googlecloud gespeichert wird. Sollten sie dies nicht wünschen kontaktieren sie mich bitte Umgehend um z.B. alternativen zu verhandeln.
Re: Code signing available for OpenOffice
On 2016-10-10, 12:03 AM Mark Thomas wrote: On 9 October 2016 20:21:32 BST, Andrea Pescetti wrote: Coming back to this discussion based on recent conversations on the OpenOffice dev list: does the Symantec code signing apply to Windows only, or is it relevant to Mac OS X (and Gatekeeper) too? The Symantec service covers Windows binaries and Java JARs. We have separate a service for the Apple app store (and another for the Google app store). Is there a signing service for downloads from the OpenOffice website? Signing service for the Apple app store is kind-of pointless to this point in time since Apache OpenOffice is not available on the app store. -- _ Larry I. Gusaas Moose Jaw, Saskatchewan Canada Website: http://larry-gusaas.com "An artist is never ahead of his time but most people are far behind theirs." - Edgard Varese - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
Jim Jagielski wrote: On Oct 10, 2016, at 2:03 AM, Mark Thomas wrote: We have separate a service for the Apple app store (and another for the Google app store). Could you provide some info (or a pointer to info) regarding the App-store service, how it works, how to request access, etc.. Note that the current priority (in case this makes any difference) is to get a valid signature that will be recognized by Gatekeeper. This is probably a prerequisite for the App Store, but for the App Store we would probably need further code changes that may come at a later stage. Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
FWIW, I attended the code signing related talk at ApacheConEU 2014. While it only applied to Windows, I think it is important to sign binaries: AOO is a wide target for the wares sites and it's a matter of fact they may add spyware. I suspect the App Store won't be available to us since they usually ask for sandboxing and we would not be able to access Java or provide Python. Pedro. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
> On Oct 10, 2016, at 2:03 AM, Mark Thomas wrote: > > On 9 October 2016 20:21:32 BST, Andrea Pescetti wrote: >> On 10/09/2016 Mark Thomas wrote: >>> On 9 September 2016 23:29:49 BST, Andrea Pescetti wrote: Mark Thomas wrote: > The infrastructure team has regained access to the OpenOffice code > signing account. If you would like to use it to sign releases >> please > open an infra ticket and provide the Apache IDs May I ask if this is the same Symantec system ... >>> It is. >> >> Coming back to this discussion based on recent conversations on the >> OpenOffice dev list: does the Symantec code signing apply to Windows >> only, or is it relevant to Mac OS X (and Gatekeeper) too? > > The Symantec service covers Windows binaries and Java JARs. > > We have separate a service for the Apple app store (and another for the > Google app store). > Thanks! Could you provide some info (or a pointer to info) regarding the App-store service, how it works, how to request access, etc.. tia! - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
On 9 October 2016 20:21:32 BST, Andrea Pescetti wrote: >On 10/09/2016 Mark Thomas wrote: >> On 9 September 2016 23:29:49 BST, Andrea Pescetti wrote: >>> Mark Thomas wrote: The infrastructure team has regained access to the OpenOffice code signing account. If you would like to use it to sign releases >please open an infra ticket and provide the Apache IDs >>> May I ask if this is the same Symantec system ... >> It is. > >Coming back to this discussion based on recent conversations on the >OpenOffice dev list: does the Symantec code signing apply to Windows >only, or is it relevant to Mac OS X (and Gatekeeper) too? The Symantec service covers Windows binaries and Java JARs. We have separate a service for the Apple app store (and another for the Google app store). Mark - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
On 10/09/2016 Mark Thomas wrote: On 9 September 2016 23:29:49 BST, Andrea Pescetti wrote: Mark Thomas wrote: The infrastructure team has regained access to the OpenOffice code signing account. If you would like to use it to sign releases please open an infra ticket and provide the Apache IDs May I ask if this is the same Symantec system ... It is. Coming back to this discussion based on recent conversations on the OpenOffice dev list: does the Symantec code signing apply to Windows only, or is it relevant to Mac OS X (and Gatekeeper) too? Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
On 9 September 2016 23:29:49 BST, Andrea Pescetti wrote: >Mark Thomas wrote: >> The infrastructure team has regained access to the OpenOffice code >> signing account. If you would like to use it to sign releases please >> open an infra ticket and provide the Apache IDs of those committers >that >> need access. > >May I ask if this is the same Symantec system that was rumored to be >about to be abandoned in early 2016? I hadn't renewed credentials since > >it seemed clear that the ASF would abandon it. It is. The renewal discussion prompted a number of additional PMCs to come forward to request access. This enabled VP Infra to negotiate acceptable terms to renew it. >Anyway, thanks for getting access again; just to be clear, it has not >been discussed so far to use it very soon, but it's good to know that >the ASF still has signing facilities available. ACK. Mark - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Code signing available for OpenOffice
Mark Thomas wrote: The infrastructure team has regained access to the OpenOffice code signing account. If you would like to use it to sign releases please open an infra ticket and provide the Apache IDs of those committers that need access. May I ask if this is the same Symantec system that was rumored to be about to be abandoned in early 2016? I hadn't renewed credentials since it seemed clear that the ASF would abandon it. Anyway, thanks for getting access again; just to be clear, it has not been discussed so far to use it very soon, but it's good to know that the ASF still has signing facilities available. Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Code signing available for OpenOffice
OpenOffice developers, The infrastructure team has regained access to the OpenOffice code signing account. If you would like to use it to sign releases please open an infra ticket and provide the Apache IDs of those committers that need access. Note that you can test sign files as much as you like but production signings cost the ASF real $$$. If you have any questions, please do get in touch. Cheers, Mark - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
