All,
We currently have a digicert windows signing certificate that we maintain for OSGeo projects. In the past few years, there has been no requests for windows signing certs. Is this still a need? Do we need to maintain the existing? Can app bundle signing be done with letsencrypt? We have 90 days until the current cert expires. If you know a project that uses windows signing, please loop them into this discussion.
Mike
–
Michael Smith
OSGeo Treasurer
Hi Mike,
On Thu, 04. Dec 2025 at 13:25:25 -0500, Michael Smith via Board wrote:
We currently have a digicert windows signing certificate that we maintain for
OSGeo projects.
The OSGeo4W installer is signed with it and the QGIS MSI standalone installers.
Jürgen
--
Jürgen E. Fischer norBIT GmbH Tel. +49-4931-918175-31
Dipl.-Inf. (FH) Rheinstraße 13 Fax. +49-4931-918175-50
Software Engineer D-26506 Norden https://www.norbit.de
QGIS release manager (PSC) Germany IRC: jef on Libera|OFTC
Pflichtangaben (222 Bytes)
Ok sounds like I need to renew as normal. Thanks for letting me know.
Michael Smith
OSGeo Treasurer
On Dec 4, 2025, at 2:41 PM, Jürgen E. Fischer <jef@norbit.de> wrote:
Hi Mike,
On Thu, 04. Dec 2025 at 13:25:25 -0500, Michael Smith via Board wrote:
We currently have a digicert windows signing certificate that we maintain for
OSGeo projects.The OSGeo4W installer is signed with it and the QGIS MSI standalone installers.
Jürgen
--
Jürgen E. Fischer norBIT GmbH Tel. +49-4931-918175-31
Dipl.-Inf. (FH) Rheinstraße 13 Fax. +49-4931-918175-50
Software Engineer D-26506 Norden https://www.norbit.de
QGIS release manager (PSC) Germany IRC: jef on Libera|OFTC
norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
Rheinstrasse 13, 26506 Norden
GF: Juergen Fischer, Nils Kutscher HR: Amtsgericht Aurich HRB 100827
Datenschutzerklaerung: Datenschutz - norBIT GmbH
<signature.asc>
I believe we still use that cert to sign GeoServer installers.