[Qgis-psc] signing and downloads of QGIS Mac OS X installer

[Richard Duivenvoorde]

Hi William, Larry,

@William, not sure if you read psc lists normally, but we are talking
about this thread [0]
I'm writing this to you both as you are both our OSX packagers

In short:
- Larry asked if it was possible to sign the mac installers with a
certificate
- in [0] there was some discussion about it, culminating in: 'let
qgis.org' buy a certificate, either apple only (cheap) or one for all
os's (more expensive) [4]
- there was also the question if it would be possible to make the mac
installers directly downloadable from qgis.org servers

-1-
Personally IF qgis.org can buy a (5 year) cert from apple now, let's do
that. When other OS's require a certifiate signing also, we can always
switch to another certificate.
So either Larry or William, do you have any experience with getting this
kind of cert's from Apple? I once had a personal dev license, and I
needed to fax my company credentials to america for that :-(
So I'm prepared, but please guide me, or let me know what we need to get
one of the apple's cert's

-2-
If we (@Alex, ok?) give you an ssh account on the download server of
qgis.org, is it then OK for you to put all needed downloadables/lib
packages there?
AND provide the information that you now provide on your personal web
pages in the documentation at [1]
You can provide pretty specific info per OS or QGIS version like we do
for the different Linux distro's: [2].

Opinions? Ideas? or Pointers?

Regards,

Richard Duivenvoorde
( /me writing in my role as PSC Infrastructure Manager here )

[0] https://lists.osgeo.org/pipermail/qgis-psc/2015-October/003300.html
[1] http://qgis.org/en/site/forusers/download.html#mac
[2] http://qgis.org/en/site/forusers/alldownloads.html#debian-ubuntu
[4] https://www.globalsign.com/en/code-signing-certificate/