qcif / data-curator

Data Curator - share usable open data
MIT License
264 stars 38 forks source link

Code-signing vs stores #1005

Open ghost opened 4 years ago

ghost commented 4 years ago

Need to test/investigate what happens to availability of signed releases after accounts expire for:

ghost commented 4 years ago

Updated tags if we choose publish to Windows store.

ghost commented 3 years ago

QCIF is to sponsor publishing to Windows store.

ghost commented 3 years ago

Recent release was not code-signed (no scope from sponsor to renew Apple Developer account) Just note here for later reference for answer to question, "What happens to availability previously signed releases when Apple Developer account expires?" From: https://developer.apple.com/support/certificates#Developer%20ID%20Application%20Certificate

Developer ID Installer Certificate (Mac applications) If your certificate expires, users can no longer launch installer packages for your Mac applications that were signed with this certificate. Previously installed apps will continue to run however new installations will not be possible until you have re-signed your installer package with a valid Developer ID Installer certificate. If your certificate is revoked, users will no longer be able to install applications that have been signed with this certificate.

jungshadow commented 3 years ago

@mattRedBox Is this something that the community might be able to sponsor (i.e. fund your Apple developer account)? IIRC, it's not an exorbitant amount.

ghost commented 3 years ago

Hi @jungshadow Atm it's AU$149. However the issue with this account (as opposed to Microsoft) is that it's a fee that must be renewed annually, however apps already signed, once downloaded, should always work: your apps will still function for users who have already installed or downloaded them (from Apple Developer website): . Perhaps though, in future, I can look at means of adding something to the page to encourage this. In the meantime, my organisation contact details are provided here if people are looking to fund this - and I can sign the latest release. Any other questions about please let me know.

jungshadow commented 3 years ago

Thanks, @mattRedBox. I'll reach out.