Code signing certificate for open-source projects? -
I want to publish one of my applications as open-source and want to digitally sign on the binary created by me. Yes certificate. (Of course, someone else can download any code and make himself a certificate of mine.) I want to do this so that no one can see that this build was made by me, not by anyone else I want to create a secure website with a valid SSL certificate so that visitors can make their accounts securely so that they can contribute to this project.
I can make a self-signed certificate, but I really do not like that option or I can pay Verizon a piece of gold to get the certificate which is something Will be valid for years. I do not like that option because my treasure is valuable to me.
So, are there any other options? For example, a provider who supports open source projects by giving certificate for low cost? It is not free, much less expensive than Verisign ...
(The project is created in C #. Additional projects in ASP .NET which require SSL.)
You can try with it that you are certified by other carrier-user CAcert is a reputation-based system, therefore If you are often certified then your certificate is assumed to be valid.
You may have to add CAcert as a trusted authority on the target system, there should be enough options for signing your executable, but you have to provide a public certificate. Using a known authority can help verify the file, but I think that in this case it has been murdered, use the checksum or shay 2 hash of the file with your own signed certificate. You can set a Linux box as a CA, but they must rely on your public certificate
Comments
Post a Comment