Signed release pkg/hash of signed contents about santa HOT 3 CLOSED

We'll have a signed kext, but expect that people should ultimately be building and signing the extension themselves. Signed packages shouldn't be a problem, though.

from santa.

That's untrue, we'll always supply a signed kext because getting an
extension signing certificate is intentionally difficult. The only reason
to build yourself is if you want to customize it in some way that wouldn't
make sense as an option.

I'll start uploading a signed package for future releases.

@arubdesu: if you want a signed package for 0.9.8 let us know, otherwise
0.9.9 should be out in a few weeks, probably.

We'll have a signed kext, but expect that people should ultimately be
building and signing the extension themselves. Signed packages shouldn't be
a problem, though.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub
#40 (comment)

from santa.

I'm fine sitting tight, if anyone else is paranoid in the meantime, I'm getting 0d843077036211460bb944a03b85d28799091e29fb5cac282a5f35d124d12845 as a sha256 for santa-0.9.8.pkg. Not sure the autopkg folks are going to merge my kext checker in the near future, so I'll be glad to change this to a pkg sig checking version when that's live. Thanks!

from santa.