[QGIS-Developer] Question on signed windows installers

[Neumann, Andreas]

Hi Jürgen, 

Thanks a lot for the explanations, your work and efforts around signing
and fixing the weeklies! 

Another step in order to make QGIS more professional. 

Andreas 

On 2017-08-22 10:41, Jürgen E. Fischer wrote:

> Hi Andreas,
> 
> On Tue, 22. Aug 2017 at 09:39:48 +0200, Neumann, Andreas wrote: 
> 
>> I noticed that the Windows all-in-one installers are now signed (Open
>> Source Geospatial Foundation). Is 2.18.12 the first signed version or
>> were the previous versions also signed?
> 
> Yes, it's the first one.
> 
>> In any case - wanted to report back that our AV scanner did not complain
>> about 2.18.12, whereas it "swallowed" the QGIS 3 weekly without even
>> visibly notifying (only in the log file one could see that QGIS 3 was
>> sent to quarantine and the original installer file removed). Perhaps
>> signing installers builds trust with AV software? Installing over
>> OSGEO4W installer is always fine.
> 
> The weeklies apparently weren't built for a while.  Did anyone else notice?
> 
> I added signing for the weekly yesterday.  Requires wine and in turn xvfb -
> because we need to produce an extra installer that installs an uninstaller, so
> we can sign it and include it in the actual installer - runs fine locally (but
> w/o xvfb), but currently the final step crashes with a bus error on qgis2...
> 
> Jürgen 
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20170822/90c4c364/attachment.html>