Ping

We currently have no ability to sign windows binaries

Is there a time estimate when it will be ready then?

@ausil We did, though, right? What happened?

I assume the certificate has expired and the authority stopped issuing new ones (startcom) or they switched to an insane process (certum).

Is there any progress on this?

@mattdm the certs expired and we have not been able to buy new ones. we used certum. @puiterwijk was looking into new options. I need to check back with him on it.

To the best of my knowledge, the cheapest option currently available (excluding Certum who require you to buy their crypto hardware) is Symantec: https://www.digicert.com/order/order-1.php for $89 - $111 per year.

@mattdm , I have the same status that @ausil provided 18 days ago from @mohanboddu as of 19-Mar-2018:

Waiting on @puiterwijk . We used an open source cert from a vendor and things changed and it's now $1,500 for the cert. Now have collaboration with the vendor. Patrick is trying to get the cert and import it.

$1,500?! Where and how? Digicert raised their prices in the meantime so it now costs up to $223 but that's still WAY less than $1,500.

Another two weeks passed, F28 release is pretty close and there has been no movement on this for 5 months already. Can you PLEASE get a certificate and release 4.1.1?
I'm leaving Red Hat in 3 weeks and this really takes away my will to continue maintaining FMW in my free time afterwards.

@mbriza — I'll make sure this gets resolved, urgently.

@mbriza I talked to @syeghiay just now and things are in progress despite lack of updates. I'll have more for you soon.

@mattdm Currently @puiterwijk is looking at adding x509 support to sigul so that we can use sigul to sign windows FMW build.

I just received Mac Mini from Dennis today, so we have the hardware required to sign Mac FMW, but we need the Apple Developer account which probably @syeghiay already mentioned to you.

My last update is that @jperrin is going to talk to @puiterwijk and @pfrields about this at this week's hack fest.

We have now acquired both Apple and Microsoft code signing certificates.
I will work on getting the new FMW updates signed and released over the coming week.

@puiterwijk reports that he will do this release today for F28.

Sorry, forgot to update the ticket.
We have FMW 4.1.1 builds for Mac and Windows, and @mohanboddu was going to make sure they get published.

And Mohan told me that Websites has already applied it: https://pagure.io/fedora-websites/issue/818

@puiterwijk yes, for F28.
F27 is still using 4.1.0, which is still on the server, at least until tomorrow ;)