search

google / or-tools

Google's Operations Research tools:
https://developers.google.com/optimization/
Apache License 2.0
11.1k stars 2.11k forks source link

Authenticode sign assemblies #2757

Open Darksecond opened 3 years ago

Darksecond commented 3 years ago

What language and solver does this apply to? .NET

Describe the problem you are trying to solve. We want to use Google.OrTools but there are company policies that require third-party code to be authenticode signed.

Describe the solution you'd like Authenticode sign the assemblies inside Google.Ortools.

Additional context Protobuf already has authenticode signing support, we can get implementation information from them https://github.com/protocolbuffers/protobuf/issues/5756 and https://github.com/grpc/grpc-dotnet/issues/24.

Mizux commented 3 years ago

seems dotnet nuget sign will be available in .Net 6... ref: https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-nuget-sign

BTW first we should migrate from .Net Core SDK 3.1 LTS to .Net 5 (ed code and CI dockers) then upgrade to .Net 6 this fall (once there is a release ?) and then add signing, or at least will be the hypothetico plan for Q4 2021 but no ETA guaranty...

Darksecond commented 3 years ago

Please note that signing a NuGet package (as with dotnet nuget sign) is different from authenticode signing (which is signing all assemblies inside a NuGet package)