Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-33709

Windows installers should be signed by the Jenkins project

    XMLWordPrintable

Details

    Description

      To my knowledge there's not a ticket capturing this already, so I'm filing to keep track.

      The Windows installer is signed by "Infradna, Inc", I've never even heard of them!

      Really, this should be signed by SPI, Inc or Jenkins if possible

      Attachments

        Activity

          abayer Andrew Bayer added a comment -

          So!

          Windows code signing certs can only be issued to either individuals or corporate entities. Since the Jenkins project is not a corporate entity, it can't be issued a certificate. SPI is a corporate entity, but, so far as I can tell, is not willing to play that role for its projects when it comes to code signing certs. We should really try contacting LibreOffice (also at SPI) to see how they do it...

          abayer Andrew Bayer added a comment - So! Windows code signing certs can only be issued to either individuals or corporate entities. Since the Jenkins project is not a corporate entity, it can't be issued a certificate. SPI is a corporate entity, but, so far as I can tell, is not willing to play that role for its projects when it comes to code signing certs. We should really try contacting LibreOffice (also at SPI) to see how they do it...
          slide_o_mix Alex Earl added a comment -

          The installers have been signed for some time now.

          slide_o_mix Alex Earl added a comment - The installers have been signed for some time now.

          People

            Unassigned Unassigned
            rtyler R. Tyler Croy
            Votes:
            1 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: