← Back to team overview

kicad-developers team mailing list archive

Re: Signing the Mac builds

 

Thanks for the feedback.  I will take a look at signing with the Wayne and
Layne account and will report back.  As long as it doesn't look like we are
claiming ownership over KiCad I only want to think about this stuff so
much--we all have important things to do :)

Adam Wolf
On Oct 6, 2015 3:51 PM, "Wayne Stambaugh" <stambaughw@xxxxxxxxx> wrote:

> On 10/6/2015 12:43 PM, Nick Østergaard wrote:
> > 2015-10-06 16:14 GMT+02:00 Adam Wolf <adamwolf@xxxxxxxxxxxxxxxxxxxx>:
> >> Hi folks!
> >>
> >> OS X has this thing called Gatekeeper.  Applications that are
> downloaded off
> >> the internet fall under its "protection".  Systems have 3 settings for
> >> Gatekeeper:
> >>
> >> 1) Only allow applications distributed through the Mac App Store
> >> 2) Mac Store + Developer signed applications
> >> 3) Let anything run
> >>
> >> It is certainly beyond scope to distribute KiCad builds through the Mac
> App
> >> Store in the near future.  It is not necessarily beyond scope for me to
> set
> >> up package signing.  The main benefit we get is that users will no
> longer
> >> have to right click on KiCad the first time they open it in order to
> run the
> >> unsigned application, and our application appears a little more
> >> professional.
> >>
> >> Assuming the core team doesn't have philosophical objections to this,
> there
> >> are some organizational aspects.
> >>
> >> The application needs to be signed by a key we'd get from Apple.  There
> is
> >> likely a $99/yr fee per *developer account* for this.  We already have
> one
> >> at Wayne and Layne.  If we used ours to sign the KiCad builds, there
> would
> >> likely be a place where you'd be able to see our name on the builds,
> but we
> >> could probably get this going in a few days.
> >>
> >> Alternatively, we could get another developer account just for KiCad.
> Wayne
> >> and Layne can cover the yearly fee.  The application process was
> actually
> >> kinda lengthy and involved some phone calls, but we can definitely do
> it.
> >
> > Personally I would not mind it to be signed by Wayne and Layne,
> > afterall you are donating resources to KiCad, so I don't mind seeing
> > your name on the certificate related information.
>
> I'm not sure what signing entails on OSX but if it's like signing any
> other file with your GPG key, I don't see any problem with Wayne and
> Layne signing the KiCad OSX bundles.
>
> >
> >> I haven't worked with this stuff intimately, actually, so the next step
> >> might be to:
> >>
> >> 1) confirm with the core team that this might be reasonable
> >> 2) I look into it more
> >>
> >> Thoughts?
> >>
> >> Adam Wolf
> >> Cofounder and Engineer
> >> Wayne and Layne
> >>
> >> _______________________________________________
> >> Mailing list: https://launchpad.net/~kicad-developers
> >> Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
> >> Unsubscribe : https://launchpad.net/~kicad-developers
> >> More help   : https://help.launchpad.net/ListHelp
> >>
> >
> > _______________________________________________
> > Mailing list: https://launchpad.net/~kicad-developers
> > Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
> > Unsubscribe : https://launchpad.net/~kicad-developers
> > More help   : https://help.launchpad.net/ListHelp
> >
>
> _______________________________________________
> Mailing list: https://launchpad.net/~kicad-developers
> Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~kicad-developers
> More help   : https://help.launchpad.net/ListHelp
>

Follow ups

References