Re: [Signing] New component for code signing

2018-01-24 Thread Benedikt Ritter
Hello Mark, +1 In my opinion this is exactly what Commons should be doing. Regards, Benedikt Mark Thomas schrieb am Di., 23. Jan. 2018 um 07:34 Uhr: > All, > > As you may know, the ASF has been using a code signing service for a > number of years provided by Symantec. We use it to sign Commons

Re: [Signing] New component for code signing

2018-01-24 Thread Gary Gregory
+1 Gary On Wed, Jan 24, 2018 at 1:35 AM, Benedikt Ritter wrote: > Hello Mark, > > +1 In my opinion this is exactly what Commons should be doing. > > Regards, > Benedikt > > Mark Thomas schrieb am Di., 23. Jan. 2018 um 07:34 Uhr: > > > All, > > > > As you may know, the ASF has been using a code

Re: [Signing] New component for code signing

2018-01-24 Thread Bernd Eckenfels
: Gary Gregory Gesendet: Mittwoch, 24. Januar 2018 22:05 An: Commons Developers List Betreff: Re: [Signing] New component for code signing +1 Gary On Wed, Jan 24, 2018 at 1:35 AM, Benedikt Ritter wrote: > Hello Mark, > > +1 In my opinion this is exactly what Commons should be doing. &g

Re: [Signing] New component for code signing

2018-01-24 Thread Hasan Diwan
+1 On 22 January 2018 at 22:33, Mark Thomas wrote: > All, > > As you may know, the ASF has been using a code signing service for a > number of years provided by Symantec. We use it to sign Commons Daemon > Windows binaries. > > The code signing service has a web based GUI and a SOAP based API. >

Re: [Signing] New component for code signing

2018-01-24 Thread Matt Sicker
+1 (non-binding) I'd find such a plugin useful for Apache Chainsaw in the future. Any other Java GUI apps at Apache could benefit as well. On 24 January 2018 at 17:19, Hasan Diwan wrote: > +1 > > On 22 January 2018 at 22:33, Mark Thomas wrote: > > > All, > > > > As you may know, the ASF has be

Re: [Signing] New component for code signing

2018-01-24 Thread Rob Tompkins
+1 > On Jan 24, 2018, at 4:05 PM, Gary Gregory wrote: > > +1 > > Gary > >> On Wed, Jan 24, 2018 at 1:35 AM, Benedikt Ritter wrote: >> >> Hello Mark, >> >> +1 In my opinion this is exactly what Commons should be doing. >> >> Regards, >> Benedikt >> >> Mark Thomas schrieb am Di., 23. Jan.

Re: [Signing] New component for code signing

2018-01-30 Thread Robert Munteanu
Hi Bernd, On Wed, 2018-01-24 at 22:26 +0100, Bernd Eckenfels wrote: > +1 - and I would expect we also see a Server-side component. > > BTW: Eclipse also has some infrastructure for this (we use a modified > Version with a PHP backend on-prem) > > http://git.eclipse.org/c/cbi/org.eclipse.cbi.git

RE: [Signing] New component for code signing

2018-01-30 Thread Bernd Eckenfels
Well, there are plans by me. I would not invest time in a project nobody else can use… Maybe there can be some consensus on a common protocol. Gruss Bernd Von: Robert Munteanu Gesendet: Dienstag, 30. Januar 2018 11:21 An: Commons Developers List Betreff: Re: [Signing] New component for code

Re: [Signing] New component for code signing

2018-01-30 Thread Robert Munteanu
There can be of course plans for server-side code signing components. Thanks, Robert > > Gruss > Bernd > > Von: Robert Munteanu > Gesendet: Dienstag, 30. Januar 2018 11:21 > An: Commons Developers List > Betreff: Re: [Signing] New component for code signing > >

Re: [Signing] New component for code signing

2018-02-01 Thread Emmanuel Bourg
Le 23/01/2018 à 07:33, Mark Thomas a écrit : > Thoughts? Comments? +1 I might even be able to contribute some elements I developed for my jsign project [1]. jsign is able to sign Windows executables but using a local signing certificate or a PKCS#11 token. It comes with an Ant task, a Maven plug

Re: [Signing] New component for code signing

2018-02-01 Thread Mark Thomas
On 01/02/18 22:08, Emmanuel Bourg wrote: > Le 23/01/2018 à 07:33, Mark Thomas a écrit : > >> Thoughts? Comments? > > +1 > > I might even be able to contribute some elements I developed for my > jsign project [1]. jsign is able to sign Windows executables but using a > local signing certificate o

Re: [Signing] New component for code signing

2018-02-01 Thread Rob Tompkins
> On Feb 1, 2018, at 5:28 PM, Mark Thomas wrote: > >> On 01/02/18 22:08, Emmanuel Bourg wrote: >>> Le 23/01/2018 à 07:33, Mark Thomas a écrit : >>> >>> Thoughts? Comments? >> >> +1 +1 >> >> I might even be able to contribute some elements I developed for my >> jsign project [1]. jsign is a