Re: [IronPython] Authenticode Signing of Releases

2011-03-18 Thread Vernon Cole
Resurrecting an old topic... I just noticed when I loaded a new machine with CPython 2.7, that it is signed by the Python Software Foundation. Do you not suppose that, if asked, they would also be willing to sign other implementations? -- Vernon P.S.: I loaded IronPython 2.7 first! On

Re: [IronPython] Authenticode Signing of Releases

2011-03-18 Thread Jeff Hardy
Yes, I believe they would - there was a brief discussion at PyCon, but I haven't made a formal request yet. - Jeff On Fri, Mar 18, 2011 at 8:12 AM, Vernon Cole vernondc...@gmail.com wrote: Resurrecting an old topic... I just noticed when I loaded a new machine with CPython 2.7, that it is

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Vernon Cole
There is CAcert.org, who will issue a certificate which by fiddling IIRC can be made into a code signing certificate. But while CAcert.org is a * recognized* certificate authority, they are not a *trusted* authority (particularly, they are not trusted by Microsoft) so it's a lot of work to not

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Dave Wald
It would be better for acceptance and evangelistic purposes, in my shop anyway, (but that's another story...) Hell, I might even chip in a few bucks if need be. But I really don't care. I trust you guys... ;-) On 2/23/2011 10:58 AM, Jeff Hardy wrote: Older releases of IronPython were

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Jimmy Schementi
I'd vote for it not being worth it right now, unless someone wants to donate the money, and even then it makes things more complex. ~Jimmy On Wed, Feb 23, 2011 at 3:39 PM, Dave Wald davew...@tx.rr.com wrote: It would be better for acceptance and evangelistic purposes, in my shop anyway, (but

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Steve Dower
It's easiest if someone donates a personal certificate, which then puts their name on the releases (as is done with TortoiseSVN and TortoiseHG, for example). However, without a sponsor organisation it's very hard to get hold of a trustworthy certificate (which a personal one is generally not).

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread andrew Wilson
I can reach out to my company, we are a CA, to see if they'd sponsor a cert? Sounds like folk aren't much interested in that though. -A On Wed, Feb 23, 2011 at 1:57 PM, Steve Dower s.j.do...@gmail.com wrote: It's easiest if someone donates a personal certificate, which then puts their name