Re: [cbi-dev] Signing third-party content

[Mikael Barbero <mikael.barbero@xxxxxxxxxxxxxxxxxxxxxx>]

Hi Dirk,

We won't sign 3rd parties libraries on behalf of them. You need to reach out to the respective developers and ask them to provide binaries with hardened runtime enabled and signed.

Cheers,

Mikaël Barbero 

Team Lead - Release Engineering | Eclipse Foundation

🐦 @mikbarbero

Eclipse Foundation: The Platform for Open Innovation and Collaboration

Le 4 juin 2020 à 13:40, Dirk Fauth <dirk.fauth@xxxxxxxxxxxxxx> a écrit :

Hi,

I tried to adapt the process to sign and notarize APP4MC. There openjfx and sqlite jdbc is included. For the binaries of those plugins I get notarization errors that they are not signed and do not include a secure timestamp. 

Is there any way that we can get those third-party libraries signed? Or what should be the process here? 

Greez, 

Dirk 

_______________________________________________
cbi-dev mailing list
cbi-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/cbi-dev

Attachment: signature.asc
Description: Message signed with OpenPGP