[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: JCE Code Signing Certificate



* Charles Fry:

> I should also point out that this JCE Code Signing Certificate is
> necessary not only to allow libbcprov-java to be used as a trusted
> security provider, but also for me to package bcmail, bctsp, and bcpg
> which are also part of Bouncy Castle. I can currently build all of them,
> but the regression tests fail as the resulting jars need to be signed.
>
> Can someone please comment on how we should proceed to obtain a JCE Code
> Signing Certificate for Debian?

Why can't we just install a trusted certificate in our own packages?

It's not clear to me who should own the private key corresponding to
the certificate, either.  Perhaps you could explain why this
certificate is needed?  Hopefully, the rest follows from that.



Reply to: