Show HN: Ananas – a hackable data tool for beginners

Re:Show HN: Ananas – a hackable data tool for beginners by nishkalkashyap on Monday July 22, 2019 @12:44PM (#20499757)

I would recommend code-signing the build before distributing.

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by yazan94 on Monday July 22, 2019 @02:11PM (#20500607)

I'm not super familiar with code signing, but if alternatives are expensive, could OP maintain a checksum value on their download page rather than go with DigiCert or alternative services? Or does code-signing solve a different problem?

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by nishkalkashyap on Saturday July 27, 2019 @12:50AM (#20540436)

No. Code signing is very different. Checksum would only work for developers on linux. Without code signing certificate, MacOS would straight refuse to run the app and windows will show an 'Unverified publisher' warning. Also things like auto-updates do not work on either platform unless you code sign your binaries.

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by millboh on Monday July 22, 2019 @01:00PM (#20499938)

Thanks for your feedback, we will look for some affordable code-signing certificates. Any suggestions? By the way, here is the issue link: https://github.com/ananas-analytics/ananas-desktop/issues/61

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by pimterry on Monday July 22, 2019 @01:11PM (#20500064)

I set up code signing for an electron app relatively recently. Best option I could find was Digicert. Really sucks that this stuff is necessary nowadays and not free, but it's not so bad.

That's for Windows - for Mac you'll also need an Apple developer account, afaik they're the only people who can issue certs.

EDIT: Woah, I take that back. Digicert has now gone up from $74/year to $474/year, which is crazy. I now also need a new certificate provider...

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by NewsAware on Monday July 22, 2019 @03:29PM (#20501452)

For Electron signing we use Tucows Code signing certs (you need to register as Tucows auther for free) which are provided by Comodo for $140 for 2 years. Didn't have any issues besides getting a proper CI/CD process running.

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by justinclift on Tuesday July 23, 2019 @09:08AM (#20506403)

There aren't any great options, but if it helps we (sqlitebrowser.org) went with Certum:

https://en.sklep.certum.pl/data-safety/code-signing-certific...

We chose the "Open Source Code Signing" option, with it being stored on a physical keyfob thing (eg not "in the cloud"). Total cost, including the new key fob and super expensive, week+ delay, mandatory postage (!) was around 135 Euro.

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by nishkalkashyap on Saturday July 27, 2019 @12:53AM (#20540444)

For my project (quarkjs.io), I went for https://comodosslstore.com . They have the cheapest certificates I could find (at ~75USD), also they are the only ones issuing certificates for individual developers.

[ Parent | on HN ]

Re:Show HN: Ananas – a hackable data tool for beginners by nishkalkashyap on Saturday July 27, 2019 @12:47AM (#20540427)

I've submitted a response on GitHub.

[ Parent | on HN ]