search

maximwhere / telephone

Automatically exported from code.google.com/p/telephone
Other
0 stars 0 forks source link

Code-sign the application for improved keychain integration #323

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Telephone should be code-signed, in order for updates not to have to ask for 
permission to access 
the keychain entries.

More info here:
http://developer.apple.com/mac/library/documentation/Security/Conceptual/CodeSig
ningGuide/

Original issue reported on code.google.com by frederik...@gmail.com on 30 May 2010 at 12:17

GoogleCodeExporter commented 9 years ago 
Yes, it would be great! Is there a way to obtain such signing identity from a 
certificate authority for free?

Original comment by eofs...@gmail.com on 30 May 2010 at 12:20

GoogleCodeExporter commented 9 years ago 
You can create your own signing identity: "... if the only reason you need a 
certificate is for a signing identity to 
use with Mac OS X, you can create your own identity by using the Certificate 
Assistant, which is provided as part 
of the Keychain Access application."

http://developer.apple.com/mac/library/documentation/Security/Conceptual/CodeSig
ningGuide/Procedures/Pr
ocedures.html#//apple_ref/doc/uid/TP40005929-CH4-SW1

Original comment by frederik...@gmail.com on 30 May 2010 at 12:25

GoogleCodeExporter commented 9 years ago 
Wouldn’t it be the same as when you’re using self-signed certificate on the 
site? The user doesn’t have that 
certificate authority on her computer and receives a warning.

Original comment by eofs...@gmail.com on 30 May 2010 at 12:30

GoogleCodeExporter commented 9 years ago 
The signed apps are not verified with a CA. The signing is just used to make 
sure that two versions of an app are 
indeed by the same author, and can therefore access the same keychain entries. 
That’s why you don’t need a 
known CA.

Original comment by frederik...@gmail.com on 30 May 2010 at 12:38

GoogleCodeExporter commented 9 years ago 
Great news, thanks! Always thought you need a CA for this.

Original comment by eofs...@gmail.com on 30 May 2010 at 12:43