{"id":514,"date":"2014-10-13T21:41:40","date_gmt":"2014-10-14T05:41:40","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=514"},"modified":"2021-01-26T09:13:18","modified_gmt":"2021-01-26T17:13:18","slug":"apache-software-foundation-code-signing-service-now-active","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/apache-software-foundation-code-signing-service-now-active\/","title":{"rendered":"Apache Software Foundation : Code Signing Service is now Active"},"content":{"rendered":"

ASF (Apache Software Foundation)<\/b> is a non-profit organization that supports more than 150 open-source software projects.<\/p>\n

Recently, the infrastructure team at ASF announced that its new Code Signing <\/b>service will be available on platforms such as Java, Windows and Android-based Applications. <\/b>Any Apache project that needs to sign a code can use this newly launched code signing service.<\/p>\n

The Apache projects have shipped source code and the code files are signed with a GPG (GNU Privacy Guard)<\/b> signature, which allows users and providers to verify code authenticity. For this, users have to either comply their application\/software or Apache will provide convenience binaries to some projects. For example, Apache\u2019s project OpenOffice<\/a><\/strong>, where users receive binaries, is ready to run.<\/p>\n

\"Apache<\/p>\n

After conducting several rounds of research, the ASF team chose Symantec\u2019s <\/b>Secure App service<\/b><\/a> for providing their code signing service. This allows the ASP team to permit access on each Apache project along with each single Project Management Committee (PMC) to have their own certificates for signing. The nature of the code signing certificate issuance will be per project\/individual, which allows the revocation of the certificate signature without disrupting any other projects.<\/p>\n

How do I Activate the Code Signing Service?<\/h2>\n

As per the APS team\u2019s report, this new code signing service allows users to sign their code using one of the following ways:<\/p>\n

    \n
  1. Web GUI(Graphical User Interface)<\/li>\n
  2. SOAP (Simple Object Access Protocol) API<\/li>\n<\/ol>\n

    ** Note:<\/strong> ASP has already written the Java Client<\/a><\/b> and an Ant Task<\/b> for certificate signing, whereas the ‘Maven plug-in is still under development.\u00a0**<\/p>\n

    Buy Symantec Code Signing at $327<\/a><\/p>\n

    How Does the Code Signing Service Work?<\/h3>\n

    The ASF team has developed this service based on the ‘pay for what you use’ principle. As per which, each PMC must use this service responsibly and as per their requirements. Additionally, the ASF team has granted permission to the Apache projects to access a test environment so that they can ensure that their code signing process is working fine.<\/p>\n

    Apache\u2019s two worldwide famous projects Commons and Tomcat<\/b> have successfully tested this code signing service and the ASF team has released the signed artifacts as Apache Commons Daemon 1.0.15 and Tomcat 8.0.14.<\/b><\/p>\n

    ** Note: <\/b>Each Apache project that intends to activate this code signing service must open an Infra JIRA ticket under the Code Signing components. **<\/p>\n

    \n

    DigiCert Code Signing Certificates<\/h2>\n

    Protect your software and their digital assets with trusted and premium code signing digital solution<\/p>\n

    Buy DigiCert Code Signing Certificate at $406<\/a><\/p>\n<\/div>\n

    Related Posts<\/h3>\n