Modify

Opened 5 years ago

Closed 5 years ago

#12115 closed enhancement (fixed)

Update code signing certificate

Reported by: Don-vip Owned by: Don-vip
Priority: major Milestone: 15.11
Component: Core Version:
Keywords: jar code signing certificate certum Cc: simon04, bastiK, wiktorn, Klumbumbus, stoecker

Description

The code signing certificate will expire in 7 days and I haven't renewed it yet.

I am requesting it right now.

We'll need to release a bit sooner this month.

Attachments (0)

Change History (11)

comment:1 Changed 5 years ago by Don-vip

Damn, it's no longer free!

comment:2 Changed 5 years ago by bastiK

Let's Encrypt looks interesting.

comment:3 Changed 5 years ago by Don-vip

Sadly, no :(
First problem: They're not yet in the JDK
Second problem: They don't plan to offer code signing certificates :(

In the future I hope we will be able to use Let's Encrypt for our website, but not for signing the jar.

comment:4 Changed 5 years ago by stoecker

We can ask for funding on josm dev list. 17.22EUR should be reachable fast. But in general I don't like the idea that we need to pay sombody only to let us release our own software.

comment:5 Changed 5 years ago by Don-vip

I can ask to openstreetmap France if we can found it. I asked to certum about this change we get 10% off for renewal.

comment:6 in reply to:  5 ; Changed 5 years ago by stoecker

Replying to Don-vip:

I can ask to openstreetmap France if we can found it. I asked to certum about this change we get 10% off for renewal.

As we have little time I think we should go for this. Do you have a Paypal account to transfer the money to and from (is it still possible to get money easy with Paypal?)?

Regarding Let's Encrypt: I'm not so sure I like it yet. 90 days renewal time is ugly. This enforces automatic procedure and actually I don't like automatic whatever on servers. For my own server I still tend to use Wosign or StartSSL free certificates which are issued for 1 year.

Probably I should include JOSM in my automatic certificate lifetime warnings, so we get warned a bit earlier next time? :-)

comment:7 in reply to:  6 Changed 5 years ago by Klumbumbus

Replying to stoecker:

(is it still possible to get money easy with Paypal?)?

Yes, however you need to choose the option "send to family and friends" when you send money, otherwise paypal will keep a fee for the transfer.
You can then withdraw the paypal money to your bank account for free.

comment:8 Changed 5 years ago by stoecker

Unizeto accepts PayPal, that's why I suggested it.

comment:9 Changed 5 years ago by Don-vip

Yes I'm going to use my Paypal account. It should be no problem to be payed back by OSM-FR in a few days :)

comment:10 Changed 5 years ago by Don-vip

Payment is done, I'm waiting for validation now. The list of documents to send is impressive, with two more documents than before:

* A copy of my ID document (French passport)
* A copy of my electoral card
* A copy of my electricity bill
* Name and hyperlink to my open-source project: JOSM - https://josm.openstreetmap.de
* Document to assure I am a representative of my association
* legal information about my association, on official French governement newspaper, the "Journal Officiel"

comment:11 Changed 5 years ago by Don-vip

Resolution: fixed
Status: newclosed

Fixed. Next jar will use the new certificate (valid starting tomorrow).

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Don-vip.
as The resolution will be set.
The resolution will be deleted.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.