[Qgis-psc] Fwd: Re: [QGIS-Developer] Question about Mac Installer

[Richard Duivenvoorde]

Should / could / can we save these certificates in the keepass file we
have for QGIS passwords, and which is accessible to all PSC members?

I saved the globalsign ones in it (before we started using letsencrypt).

In that way everybody can ask them via the PSC?

Regards,

Richard


-------- Forwarded Message --------
Subject: 	Re: [QGIS-Developer] Question about Mac Installer
Date: 	Sun, 4 Feb 2018 01:38:08 +0200
From: 	Tim Sutton <tim at kartoza.com>
To: 	Anita Graser <anitagraser at gmx.at>
CC: 	QGIS Developer <qgis-developer at lists.osgeo.org>, William
Kyngesburye <kyngchaos at kyngchaos.com>, tech at wildintellect.com



Hi

(Adding Larry to CC)

> On 02 Feb 2018, at 16:50, Anita Graser <anitagraser at gmx.at
> <mailto:anitagraser at gmx.at>> wrote:
>
>
>
> On Fri, Feb 2, 2018 at 3:41 PM, William Kyngesburye
> <woklist at kyngchaos.com <mailto:woklist at kyngchaos.com>> wrote:
>
>     I still need to figure out the signing.  I'll probably do it for
>     v3 release.
>
>     One small hitch I'm thinking about is the separate GDAL Complete -
>     I think it would be a bit odd to sign GDAL with a QGIS dev cert,
>     so I am considering making a truly all-in-one QGIS, but I really
>     want GDAL as a separate package because I use it a lot outside
>     QGIS.  There is also the external Python 3 that is not signed,
>     which I may also bundle in the QGIS app, and additional python
>     modules which are not signed.  Though loaded as a library to QGIS,
>     I don't know if that matters.
>
>     In the end, even if I make an all-in-one QGIS, I'd still have a
>     separate GDAL installer for those that need it, which wouldn't be
>     signed, along with my Postgres/PostGIS stack (which uses GDAL
>     Complete), also not signed.  So many users would still need to
>     fuss with the macOS security to get that stuff installed and running.
>
>
> ​Shouldn't there be an OSGEO certificate? I remember the discussions
> but not the exact resolution.

Yes I believe one was purchased - perhaps William and Larry can
collaborate on this since I think Larry has the OSGEO cert.

Regards

Tim

>
> Regards,
> Anita​
>
>  
>
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org <mailto:QGIS-Developer at lists.osgeo.org>
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

—






*Tim Sutton*

*Co-founder:* Kartoza
*Project chair:* QGIS.org <http://QGIS.org>

Visit http://kartoza.com <http://kartoza.com/> to find out about open
source:

Desktop GIS programming services
Geospatial web development
GIS Training
Consulting Services

*Skype*: timlinux 
*IRC:* timlinux on #qgis at freenode.net <http://freenode.net>


-------------- next part --------------
_______________________________________________
QGIS-Developer mailing list
QGIS-Developer at lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer