Update code signing certificate

[Don-vip]

The code signing certificate will expire in 7 days and I haven't renewed it yet.

I am requesting it right now.

We'll need to release a bit sooner this month.

[Don-vip]

Damn, it's ​no longer free!

[bastiK]

​Let's Encrypt looks interesting.

[Don-vip]

Sadly, no :(
First problem: ​They're not yet in the JDK
Second problem: ​They don't plan to offer code signing certificates :(

In the future I hope we will be able to use Let's Encrypt for our website, but not for signing the jar.

[stoecker]

We can ask for funding on josm dev list. 17.22EUR should be reachable fast. But in general I don't like the idea that we need to pay sombody only to let us release our own software.

[Don-vip]

I can ask to openstreetmap France if we can found it. I asked to certum about this change we get 10% off for renewal.

[stoecker]

Replying to Don-vip:

I can ask to openstreetmap France if we can found it. I asked to certum about this change we get 10% off for renewal.

As we have little time I think we should go for this. Do you have a Paypal account to transfer the money to and from (is it still possible to get money easy with Paypal?)?

Regarding Let's Encrypt: I'm not so sure I like it yet. 90 days renewal time is ugly. This enforces automatic procedure and actually I don't like automatic whatever on servers. For my own server I still tend to use Wosign or StartSSL free certificates which are issued for 1 year.

Probably I should include JOSM in my automatic certificate lifetime warnings, so we get warned a bit earlier next time? :-)

[Klumbumbus]

Replying to stoecker:

(is it still possible to get money easy with Paypal?)?

Yes, however you need to choose the option "send to family and friends" when you send money, otherwise paypal will keep a fee for the transfer.
You can then withdraw the paypal money to your bank account for free.

[stoecker]

Unizeto accepts PayPal, that's why I suggested it.

[Don-vip]

Yes I'm going to use my Paypal account. It should be no problem to be payed back by OSM-FR in a few days :)

[Don-vip]

Payment is done, I'm waiting for validation now. The list of documents to send is impressive, with two more documents than before:

* A copy of my ID document (French passport)
* A copy of my electoral card
* A copy of my electricity bill
* Name and hyperlink to my open-source project: JOSM - https://josm.openstreetmap.de
* Document to assure I am a representative of my association
* legal information about my association, on official French governement newspaper, the "Journal Officiel"

[Don-vip]

Fixed. Next jar will use the new certificate (valid starting tomorrow).