[Qgis-psc] Fwd: Re: [QGIS-Developer] Question about Mac Installer

[Tim Sutton]

HI

I believe it is possible to do that - we would need whoever currently holds the certs to create a provisioning profile for each app bundle that we plan to have…..but my knowledge of the process is quite limited so Larry would need to help us here as to how to go about it. But yes I think it is better for the project if we also can hold a central copy of these certs.

Regards

Tim
> On 04 Feb 2018, at 11:51, Richard Duivenvoorde <rdmailings at duif.net> wrote:
> 
> 
> Should / could / can we save these certificates in the keepass file we
> have for QGIS passwords, and which is accessible to all PSC members?
> 
> I saved the globalsign ones in it (before we started using letsencrypt).
> 
> In that way everybody can ask them via the PSC?
> 
> Regards,
> 
> Richard
> 
> 
> -------- Forwarded Message --------
> Subject: 	Re: [QGIS-Developer] Question about Mac Installer
> Date: 	Sun, 4 Feb 2018 01:38:08 +0200
> From: 	Tim Sutton <tim at kartoza.com>
> To: 	Anita Graser <anitagraser at gmx.at>
> CC: 	QGIS Developer <qgis-developer at lists.osgeo.org>, William
> Kyngesburye <kyngchaos at kyngchaos.com>, tech at wildintellect.com
> 
> 
> 
> Hi
> 
> (Adding Larry to CC)
> 
>> On 02 Feb 2018, at 16:50, Anita Graser <anitagraser at gmx.at
>> <mailto:anitagraser at gmx.at>> wrote:
>> 
>> 
>> 
>> On Fri, Feb 2, 2018 at 3:41 PM, William Kyngesburye
>> <woklist at kyngchaos.com <mailto:woklist at kyngchaos.com>> wrote:
>> 
>>    I still need to figure out the signing.  I'll probably do it for
>>    v3 release.
>> 
>>    One small hitch I'm thinking about is the separate GDAL Complete -
>>    I think it would be a bit odd to sign GDAL with a QGIS dev cert,
>>    so I am considering making a truly all-in-one QGIS, but I really
>>    want GDAL as a separate package because I use it a lot outside
>>    QGIS.  There is also the external Python 3 that is not signed,
>>    which I may also bundle in the QGIS app, and additional python
>>    modules which are not signed.  Though loaded as a library to QGIS,
>>    I don't know if that matters.
>> 
>>    In the end, even if I make an all-in-one QGIS, I'd still have a
>>    separate GDAL installer for those that need it, which wouldn't be
>>    signed, along with my Postgres/PostGIS stack (which uses GDAL
>>    Complete), also not signed.  So many users would still need to
>>    fuss with the macOS security to get that stuff installed and running.
>> 
>> 
>> ​Shouldn't there be an OSGEO certificate? I remember the discussions
>> but not the exact resolution.
> 
> Yes I believe one was purchased - perhaps William and Larry can
> collaborate on this since I think Larry has the OSGEO cert.
> 
> Regards
> 
> Tim
> 
>> 
>> Regards,
>> Anita​
>> 
>>  
>> 
>> _______________________________________________
>> QGIS-Developer mailing list
>> QGIS-Developer at lists.osgeo.org <mailto:QGIS-Developer at lists.osgeo.org>
>> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
>> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> 
> —
> 
> 
> 
> 
> 
> 
> *Tim Sutton*
> 
> *Co-founder:* Kartoza
> *Project chair:* QGIS.org <http://QGIS.org>
> 
> Visit http://kartoza.com <http://kartoza.com/> to find out about open
> source:
> 
> Desktop GIS programming services
> Geospatial web development
> GIS Training
> Consulting Services
> 
> *Skype*: timlinux 
> *IRC:* timlinux on #qgis at freenode.net <http://freenode.net>
> 
> 
> <Attached Message Part.txt>_______________________________________________
> Qgis-psc mailing list
> Qgis-psc at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/qgis-psc

 



---

Tim Sutton
QGIS Project Steering Committee Chair
tim at qgis.org




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-psc/attachments/20180204/69072248/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: qgis-icon-60x60.png
Type: image/png
Size: 4401 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/qgis-psc/attachments/20180204/69072248/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1501 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/qgis-psc/attachments/20180204/69072248/attachment.bin>