Re: Official code signing certificate

2013-05-26 Thread Mechtilde
Hello Andrea, Am 26.05.2013 00:07, schrieb Andrea Pescetti: janI wrote: in all fairness jsc and rob have worked with this for over a year, so it would be more fair to have them do it, and I do not want to come in between. This is a good summary written by Juergen:

Re: Official code signing certificate

2013-05-26 Thread janI
On 26 May 2013 09:53, Mechtilde o...@mechtilde.de wrote: Hello Andrea, Am 26.05.2013 00:07, schrieb Andrea Pescetti: janI wrote: in all fairness jsc and rob have worked with this for over a year, so it would be more fair to have them do it, and I do not want to come in between.

Re: Official code signing certificate

2013-05-25 Thread Andrea Pescetti
Dave Fisher wrote: The main concern that the ASF has with digitally signing with a singular apache.org certificate for the whole foundation is keeping it in strict control. For some this means physical machines. This is a high bar. I wonder if the ASF would allow AOO to experiment with an

Re: Official code signing certificate

2013-05-25 Thread janI
On 25 May 2013 12:04, Andrea Pescetti pesce...@apache.org wrote: Dave Fisher wrote: The main concern that the ASF has with digitally signing with a singular apache.org certificate for the whole foundation is keeping it in strict control. For some this means physical machines. This is a high

Re: Official code signing certificate

2013-05-25 Thread Mechtilde
Hello, what about an organisation assurance by Cacert. At FOSDEM 2013 there are some discussions with people from cacert. If you need more informations and contacts I will act as an agent. Let me know Kind regards Mechtilde Am 25.05.2013 15:22, schrieb janI: On 25 May 2013 12:04, Andrea

Re: Official code signing certificate

2013-05-25 Thread janI
On 25 May 2013 15:31, Mechtilde o...@mechtilde.de wrote: Hello, what about an organisation assurance by Cacert. At FOSDEM 2013 there are some discussions with people from cacert. If you need more informations and contacts I will act as an agent. If you can get some information, I would

Re: Official code signing certificate

2013-05-25 Thread Mechtilde
Hello Jan, can you give me a short description what we/you need and what are the problems with apache infrastructure. I'm not so familar with the apache infrastructure to understand all things of the thread. Then I will give this information to people who are familar with organisation assurance

Re: Official code signing certificate

2013-05-25 Thread janI
rgds jan I. -- Forwarded message -- From: Scott Deboy scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts

Re: Official code signing certificate

2013-05-25 Thread janI
On 25 May 2013 18:01, Mechtilde o...@mechtilde.de wrote: Hello Jan, can you give me a short description what we/you need and what are the problems with apache infrastructure. I could, but in all fairness jsc and rob have worked with this for over a year, so it would be more fair to have

Re: Official code signing certificate

2013-05-25 Thread Rob Weir
to do. Juergen rgds jan I. -- Forwarded message -- From: Scott Deboy scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have

Re: Official code signing certificate

2013-05-25 Thread janI
: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code signing cert that is signed by a trusted/root CA so the jars can be downloaded via WebStart without the user

Re: Official code signing certificate

2013-05-25 Thread Andrea Pescetti
janI wrote: in all fairness jsc and rob have worked with this for over a year, so it would be more fair to have them do it, and I do not want to come in between. This is a good summary written by Juergen: http://wiki.apache.org/general/ASFCodeSigning Note that at FOSDEM we were

Fwd: Official code signing certificate

2013-05-24 Thread janI
code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code signing cert that is signed by a trusted/root CA so the jars can be downloaded via WebStart without the user receiving a warning

Re: Official code signing certificate

2013-05-24 Thread Rob Weir
code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code signing cert that is signed by a trusted/root CA so the jars can be downloaded via WebStart without the user receiving a warning

Re: Official code signing certificate

2013-05-24 Thread Juergen Schmidt
to discuss further at the moment. I have enough other things to do. Juergen rgds jan I. -- Forwarded message -- From: Scott Deboy scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging

Re: Official code signing certificate

2013-05-24 Thread janI
: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code signing cert that is signed by a trusted/root CA so the jars can be downloaded via WebStart without the user receiving

Re: Official code signing certificate

2013-05-24 Thread Rob Weir
scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code signing cert that is signed by a trusted/root CA so the jars

Re: Official code signing certificate

2013-05-24 Thread Rob Weir
to do. Juergen rgds jan I. -- Forwarded message -- From: Scott Deboy scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have

Re: Official code signing certificate

2013-05-24 Thread Dave Fisher
. -- Forwarded message -- From: Scott Deboy scott.de...@gmail.com Date: 24 May 2013 18:59 Subject: Re: Official code signing certificate To: infrastructure-...@apache.org Logging Services has a simple requirement: Have the Chainsaw build artifacts signed by a Java code