From ooo-dev-return-23883-apmail-incubator-ooo-dev-archive=incubator.apache.org@incubator.apache.org Wed Aug 1 17:06:18 2012 Return-Path: X-Original-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 9434AD14D for ; Wed, 1 Aug 2012 17:06:18 +0000 (UTC) Received: (qmail 24359 invoked by uid 500); 1 Aug 2012 17:06:18 -0000 Delivered-To: apmail-incubator-ooo-dev-archive@incubator.apache.org Received: (qmail 24284 invoked by uid 500); 1 Aug 2012 17:06:18 -0000 Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: ooo-dev@incubator.apache.org Delivered-To: mailing list ooo-dev@incubator.apache.org Received: (qmail 24275 invoked by uid 99); 1 Aug 2012 17:06:18 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Aug 2012 17:06:18 +0000 X-ASF-Spam-Status: No, hits=0.7 required=5.0 tests=RCVD_IN_DNSWL_NONE,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [205.178.146.65] (HELO omr15.networksolutionsemail.com) (205.178.146.65) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Aug 2012 17:06:10 +0000 Received: from cm-omr9 (mail.networksolutionsemail.com [205.178.146.50]) by omr15.networksolutionsemail.com (8.13.8/8.13.8) with ESMTP id q71H5nLa006436 for ; Wed, 1 Aug 2012 13:05:49 -0400 Authentication-Results: cm-omr9 smtp.user=drew@baseanswers.com; auth=pass (LOGIN) X-Authenticated-UID: drew@baseanswers.com Received: from [207.255.220.76] ([207.255.220.76:50177] helo=[192.168.1.3]) by cm-omr9 (envelope-from ) (ecelerity 2.2.2.41 r(31179/31189)) with ESMTPA id 2A/FF-13956-DE169105; Wed, 01 Aug 2012 13:05:49 -0400 Subject: Re: Developer ID for digitally signing Apple OSX releases? From: drew To: ooo-dev@incubator.apache.org In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Date: Wed, 01 Aug 2012 13:05:52 -0400 Message-ID: <1343840752.9575.8.camel@sybil-gnome> Mime-Version: 1.0 X-Mailer: Evolution 2.32.2 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org On Wed, 2012-08-01 at 06:08 +0200, Jürgen Schmidt wrote: > Am Mittwoch, 1. August 2012 um 02:41 schrieb Rob Weir: > > On Tue, Jul 31, 2012 at 7:23 PM, Keith N. McKenna > > wrote: > > > With the release of OSX Mountain Lion and its new Gatekeeper feature I > > > wanted to ask if any thought had been given by the community of applying to > > > Apple for a Developer ID. My limited understanding is that by signing the > > > installation files with the Developer ID it automatically unlocks the > > > gatekeeper and allows the application to run. Otherwise there is a short > > > process that one must go through to change the security settings for the > > > application allowing it to open. > > > > > > > > > We'd like to do code signing, not only for Mac but for Windows as > > well. Signed installers are the new normal and are expected by > > browser, anti-virus scanners and increasingly by operating systems. > > > > Although we have volunteers willing to do the build integration work, > > and funds available for acquiring certificates, we've been told that > > individual Apache projects may not do their own signing. The Apache > > Infrastructure team is trying to figure out some way that this can be > > done centrally. But no estimate for when this will happen. > > > exactly and at the moment we can only wait, I have no idea how we can help further at the moment. Any ideas are welcome. > > In the meantime we should add a note about the new Gatekeeper of Mountain Lion. It's a one time ctrl-click or opening via the context menu. After that you can run it as normal without any further dialog from the system. > I tried it out and forget to take screenshot to document it. > > Juergen Hi, Installed the latest 3.4.1 build, as administrator, under Vista yesterday and started a few checks. Ran into this: http://lo-portal.us/aoo/temp/send-doc-warning.png I'm not totally sure on this but I assume that when the install files are signed it would take this away also - yes? Thanks, //drew > > > > Regards, > > > > -Rob > > > > > Based on a question in the user mailing list I am adding a link to the > > > Release Notes in the known problems section on how to make the required > > > change. > > > > > > Regards > > > Keith > > > > > > > > > > >