Re: [QGIS-Developer] Question about Mac Installer

[Tim Sutton]

Hi

(Adding Larry to CC)

> On 02 Feb 2018, at 16:50, Anita Graser  wrote:
> 
> 
> 
> On Fri, Feb 2, 2018 at 3:41 PM, William Kyngesburye  > wrote:
> I still need to figure out the signing.  I'll probably do it for v3 release.
> 
> One small hitch I'm thinking about is the separate GDAL Complete - I think it 
> would be a bit odd to sign GDAL with a QGIS dev cert, so I am considering 
> making a truly all-in-one QGIS, but I really want GDAL as a separate package 
> because I use it a lot outside QGIS.  There is also the external Python 3 
> that is not signed, which I may also bundle in the QGIS app, and additional 
> python modules which are not signed.  Though loaded as a library to QGIS, I 
> don't know if that matters.
> 
> In the end, even if I make an all-in-one QGIS, I'd still have a separate GDAL 
> installer for those that need it, which wouldn't be signed, along with my 
> Postgres/PostGIS stack (which uses GDAL Complete), also not signed.  So many 
> users would still need to fuss with the macOS security to get that stuff 
> installed and running.
> 
> 
> ​Shouldn't there be an OSGEO certificate? I remember the discussions but not 
> the exact resolution.

Yes I believe one was purchased - perhaps William and Larry can collaborate on 
this since I think Larry has the OSGEO cert.

Regards

Tim

> 
> Regards,
> Anita​
> 
>  
> 
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

—







Tim Sutton

Co-founder: Kartoza
Project chair: QGIS.org

Visit http://kartoza.com  to find out about open source:

Desktop GIS programming services
Geospatial web development
GIS Training
Consulting Services

Skype: timlinux 
IRC: timlinux on #qgis at freenode.net

___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Question about Mac Installer

[Anita Graser]

On Fri, Feb 2, 2018 at 3:41 PM, William Kyngesburye 
wrote:

> I still need to figure out the signing.  I'll probably do it for v3
> release.
>
> One small hitch I'm thinking about is the separate GDAL Complete - I think
> it would be a bit odd to sign GDAL with a QGIS dev cert, so I am
> considering making a truly all-in-one QGIS, but I really want GDAL as a
> separate package because I use it a lot outside QGIS.  There is also the
> external Python 3 that is not signed, which I may also bundle in the QGIS
> app, and additional python modules which are not signed.  Though loaded as
> a library to QGIS, I don't know if that matters.
>
> In the end, even if I make an all-in-one QGIS, I'd still have a separate
> GDAL installer for those that need it, which wouldn't be signed, along with
> my Postgres/PostGIS stack (which uses GDAL Complete), also not signed.  So
> many users would still need to fuss with the macOS security to get that
> stuff installed and running.
>
>
​Shouldn't there be an OSGEO certificate? I remember the discussions but
not the exact resolution.

Regards,
Anita​
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Question about Mac Installer

[William Kyngesburye]

I still need to figure out the signing.  I'll probably do it for v3 release.

One small hitch I'm thinking about is the separate GDAL Complete - I think it 
would be a bit odd to sign GDAL with a QGIS dev cert, so I am considering 
making a truly all-in-one QGIS, but I really want GDAL as a separate package 
because I use it a lot outside QGIS.  There is also the external Python 3 that 
is not signed, which I may also bundle in the QGIS app, and additional python 
modules which are not signed.  Though loaded as a library to QGIS, I don't know 
if that matters.

In the end, even if I make an all-in-one QGIS, I'd still have a separate GDAL 
installer for those that need it, which wouldn't be signed, along with my 
Postgres/PostGIS stack (which uses GDAL Complete), also not signed.  So many 
users would still need to fuss with the macOS security to get that stuff 
installed and running.

> On Jan 31, 2018, at 2:45 PM, Tim Sutton  wrote:
> 
> Hi
> 
>> On 31 Jan 2018, at 18:55, Alex M > > wrote:
>> 
>> Question 1.
>> The QGIS.org  download page
>> https://qgis.org/en/site/forusers/download.html 
>>  says:
>> "This version requires separate installation of dependency framework
>> (GDAL Complete) , also found at the download link below."
>> 
>> Kyngchaos says http://www.kyngchaos.com/software/qgis 
>> 
>> "All required items are included on the disk image."
>> 
>> Which is it? I don't actually have a Mac to test, trying to download
>> files to take to others who need it.
> 
> Its kind of both. For convenience, Willian (Kyngchaos) has included all 
> needed installer packages in the QGIS download archive. So simply download 
> it, open the DMG and install each package as indicated by the README inside 
> the DMG.
> 
>> 
>> Question 2.
>> Kyngchaos page states
>> "Install Note: OS X security may block installation, as I'm not an
>> "identified developer" (ie not paying Apple to develop software)."
>> 
>> Didn't OSGeo buy an Apple Signing cert just for issues like this?
> 
> Defer to Jürgen’s answer on this.
> 
> Regards
> 
> Tim
> 
>> 
>> Thanks,
>> Alex
>> ___
>> QGIS-Developer mailing list
>> QGIS-Developer@lists.osgeo.org 
>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer 
>> 
>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer 
>> 
> —
> 
> 
> 
> 
> 
> 
> 
> Tim Sutton
> 
> Co-founder: Kartoza
> Project chair: QGIS.org 
> 
> Visit http://kartoza.com  to find out about open source:
> 
> Desktop GIS programming services
> Geospatial web development
> GIS Training
> Consulting Services
> 
> Skype: timlinux 
> IRC: timlinux on #qgis at freenode.net 
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org 
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer 
> 
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer 
> 
-
William Kyngesburye 
http://www.kyngchaos.com/

"We can die but once, and that once we must die.  To be always fearing, then, 
would not avert it, and would make life miserable."

- Tarzan, on death

___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Question about Mac Installer

[Tim Sutton]

Hi

> On 31 Jan 2018, at 18:55, Alex M  wrote:
> 
> Question 1.
> The QGIS.org download page
> https://qgis.org/en/site/forusers/download.html says:
> "This version requires separate installation of dependency framework
> (GDAL Complete) , also found at the download link below."
> 
> Kyngchaos says http://www.kyngchaos.com/software/qgis
> "All required items are included on the disk image."
> 
> Which is it? I don't actually have a Mac to test, trying to download
> files to take to others who need it.

Its kind of both. For convenience, Willian (Kyngchaos) has included all needed 
installer packages in the QGIS download archive. So simply download it, open 
the DMG and install each package as indicated by the README inside the DMG.

> 
> Question 2.
> Kyngchaos page states
> "Install Note: OS X security may block installation, as I'm not an
> "identified developer" (ie not paying Apple to develop software)."
> 
> Didn't OSGeo buy an Apple Signing cert just for issues like this?

Defer to Jürgen’s answer on this.

Regards

Tim

> 
> Thanks,
> Alex
> ___
> QGIS-Developer mailing list
> QGIS-Developer@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

—







Tim Sutton

Co-founder: Kartoza
Project chair: QGIS.org

Visit http://kartoza.com  to find out about open source:

Desktop GIS programming services
Geospatial web development
GIS Training
Consulting Services

Skype: timlinux 
IRC: timlinux on #qgis at freenode.net

___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Question about Mac Installer

[Jürgen E . Fischer]

Hi Alex,

On Wed, 31. Jan 2018 at 08:55:32 -0800, Alex M wrote:
> Question 1.
> The QGIS.org download page
> https://qgis.org/en/site/forusers/download.html says:
> "This version requires separate installation of dependency framework
> (GDAL Complete) , also found at the download link below."

Looks like outdated information.

 
> Kyngchaos says http://www.kyngchaos.com/software/qgis
> "All required items are included on the disk image."

> Which is it? I don't actually have a Mac to test, trying to download
> files to take to others who need it.

I'd follow the advice next to the download.

 
> Question 2.
> Kyngchaos page states
> "Install Note: OS X security may block installation, as I'm not an
> "identified developer" (ie not paying Apple to develop software)."
> 
> Didn't OSGeo buy an Apple Signing cert just for issues like this?

We don't have own packages for OSX yet.  IIRC the cert was initiated by Larry
Shaffer and there was a grant to update the installer scripts and produce a
signed installer[0] - but AFAIK that didn't happen yet.

We only signed the OSGeo4W installer and the Windows standalones so far.


Jürgen


[0] http://blog.qgis.org/2017/04/30/qgis-grant-programme-2-results/

-- 
Jürgen E. Fischer   norBIT GmbH Tel. +49-4931-918175-31
Dipl.-Inf. (FH) Rheinstraße 13  Fax. +49-4931-918175-50
Software Engineer   D-26506 Norden http://www.norbit.de
QGIS release manager (PSC)  GermanyIRC: jef on FreeNode


signature.asc
Description: PGP signature
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer