[Mono-devel-list] Re: [Mono-list] CVS users - changes to assemblies signing

[Sébastien Pouliot]

Hello Peter,

There won't be "official verified assemblies" - at least not for 1.0. Mono
1.0 will ensure package (not assembly) integrity through RPM (and other
packaging signing when possible).

This means that strongnames usage/support in Mono 1.0 is limited to
manageability only (no integrity checks will be done by the runtime).

This may change in a future releases (requiring a new privates keys) once we
build the proper support in Mono and, more important, when we figure out an
easy way for Mono developers and distributors to recompile from source.

Sebastien Pouliot
http://pages.infinit.net/ctech/poupou.html


-----Original Message-----
From: mono-devel-list-admin at lists.ximian.com
[mailto:mono-devel-list-admin at lists.ximian.com]On Behalf Of Peter
Williams
Sent: 9 juin 2004 16:24
To: spouliot at videotron.ca
Cc: Mono-Devel-List
Subject: [Mono-devel-list] Re: [Mono-list] CVS users - changes to
assemblies signing


Hi,

Isn't it, um, bad to commit the private key to public CVS? Will there be
a different key for official Ximian-verified system DLL's?

Peter

On Wed, 2004-06-09 at 15:46, Sébastien Pouliot wrote:
> We are now starting to fully sign the assemblies. The process selected is
> the one that should be the easiest for developers - most CVS users should
> see the difference to build mono/mcs/... To do so the private keys (for
both
> Mono and Gtk#) have been commited to CVS. For Mono the "real" signing
> process will be made when you do a "make install" (the sn.exe tool will be
> called just before gacutil.exe). Gtk# assemblies can be signed during
> compilation.

--
Peter Williams                          peter at newton.cx

"[Ninjas] are cool; and by cool, I mean totally sweet."
                              -- REAL Ultimate Power

_______________________________________________
Mono-devel-list mailing list
Mono-devel-list at lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-devel-list