Sign the installers

[Petar]

On Thursday, 28 June 2018 at 05:57:36 UTC, Seb wrote:
> On Wednesday, 27 June 2018 at 23:54:55 UTC, Manu wrote:
>> Hey people,
>>
>> So I had a few people in the office refuse to install DMD 
>> because when
>> they launched the installer, Windows displayed the prompt that 
>> it was
>> untrusted (ie, unsigned) and not offer the install button 
>> without
>> manual override.
>> True also for VisualD.
>>
>> Can we get a key and start signing the install packages?
>>
>> It would be super-cool to sign the 2.081 release since it's 
>> like, imminent ;)
>>
>> - Manu
>
> For the record, the releases are already signed:
>
> http://downloads.dlang.org/releases/2018/
>
> dmd.2.080.1.windows.zip.sig
> dmd.2.080.1.windows.zip
> dmd.2.080.1.windows.7z.sig
> dmd.2.080.1.windows.7z
>
> Though I know that a PGP signature isn't what you are looking 
> for ;-)

Yes it is not. What is needed is for the D Language Foundation to 
obtain a code signing certificate from a trusted by Microsoft 
certificate authority and then to sign each individual .exe and 
.dll part of official realease both in the .7z archive and then 
the .exe installer as a whole.

See also:
https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms537361(v=vs.85)

https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate