← Back to team overview

kicad-developers team mailing list archive

Re: Signing the Mac builds

 

On 10/6/2015 12:43 PM, Nick Østergaard wrote:
> 2015-10-06 16:14 GMT+02:00 Adam Wolf <adamwolf@xxxxxxxxxxxxxxxxxxxx>:
>> Hi folks!
>>
>> OS X has this thing called Gatekeeper.  Applications that are downloaded off
>> the internet fall under its "protection".  Systems have 3 settings for
>> Gatekeeper:
>>
>> 1) Only allow applications distributed through the Mac App Store
>> 2) Mac Store + Developer signed applications
>> 3) Let anything run
>>
>> It is certainly beyond scope to distribute KiCad builds through the Mac App
>> Store in the near future.  It is not necessarily beyond scope for me to set
>> up package signing.  The main benefit we get is that users will no longer
>> have to right click on KiCad the first time they open it in order to run the
>> unsigned application, and our application appears a little more
>> professional.
>>
>> Assuming the core team doesn't have philosophical objections to this, there
>> are some organizational aspects.
>>
>> The application needs to be signed by a key we'd get from Apple.  There is
>> likely a $99/yr fee per *developer account* for this.  We already have one
>> at Wayne and Layne.  If we used ours to sign the KiCad builds, there would
>> likely be a place where you'd be able to see our name on the builds, but we
>> could probably get this going in a few days.
>>
>> Alternatively, we could get another developer account just for KiCad.  Wayne
>> and Layne can cover the yearly fee.  The application process was actually
>> kinda lengthy and involved some phone calls, but we can definitely do it.
> 
> Personally I would not mind it to be signed by Wayne and Layne,
> afterall you are donating resources to KiCad, so I don't mind seeing
> your name on the certificate related information.

I'm not sure what signing entails on OSX but if it's like signing any
other file with your GPG key, I don't see any problem with Wayne and
Layne signing the KiCad OSX bundles.

> 
>> I haven't worked with this stuff intimately, actually, so the next step
>> might be to:
>>
>> 1) confirm with the core team that this might be reasonable
>> 2) I look into it more
>>
>> Thoughts?
>>
>> Adam Wolf
>> Cofounder and Engineer
>> Wayne and Layne
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~kicad-developers
>> Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~kicad-developers
>> More help   : https://help.launchpad.net/ListHelp
>>
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~kicad-developers
> Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~kicad-developers
> More help   : https://help.launchpad.net/ListHelp
> 


Follow ups

References