Skip to content

Commit b8fc940

Browse files
justincliftjustinclift
committed
Add blog post about our journey with SignPath
1 parent 5fb6118 commit b8fc940

17 files changed

Lines changed: 509 additions & 34 deletions

File tree

‎content/blog/2024-11-08-our-journey-with-signpath.md‎

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
---
2+
title: Our journey with SignPath
3+
author: SeongTae Jeong
4+
date: '2024-11-08'
5+
slug: our-journey-with-signpath
6+
categories:
7+
- db4s
8+
tags:
9+
- signpath
10+
- windows
11+
---
12+
13+
# Our Journey with SignPath: Code Signing for Windows Binaries
14+
15+
When distributing software, code signing is essential to ensure our users can trust the software they download,
16+
especially on an operating system like Windows that displays security warnings for unsigned software.
17+
18+
So for us, code signing is not just an option, but a necessity to validate software binaries, prevent tampering, and
19+
for the convenience of our users.
20+
21+
22+
## A Little Background on This Journey
23+
24+
It's not difficult to code sign and notarize software binaries for Apple macOS. In fact, there's only one option.
25+
26+
However, for Windows binaries, there are a number of companies offering code signing services at varying costs, which
27+
made it difficult to choose. One of our team members learned about [SignPath](https://signpath.org),
28+
which provides free code signing services for FOSS projects, and it seemed like a logical choice for many reasons
29+
("free and seems legit"), so we contacted the SignPath team.
30+
31+
32+
## The Challenge We Faced
33+
34+
Getting started with code signing wasn't difficult, as SignPath provided us with well-written documentation. However,
35+
our existing CI/CD platform - GitHub Actions - wasn't supported by SignPath, so we needed to configure a new CI
36+
pipeline for AppVeyor to sign and deploy our software code.
37+
38+
We learned that SignPath was also supporting GitHub Actions in a private beta, so we asked for access, which we
39+
received after a few weeks.
40+
41+
There have been some minor bugs in the integration with GitHub Actions, but after reaching out to the SignPath team
42+
they were fixed within a few days.
43+
44+
As a result, we're now successfully deploying code-signed Windows binaries to our users using our existing GitHub
45+
Actions.
46+
47+
48+
## Personal Impressions and Reflections
49+
50+
We are now able to distribute code-signed Windows binaries to our users thanks to [SignPath's well-written
51+
documentation](https://about.signpath.io/documentation/signing-code), quick response to issues, and friendly support.
52+
53+
We also appreciate the fact that they don't put a financial burden on FOSS projects. :D
54+
55+
If you're looking to get your code signed for Windows binaries, I highly recommend that you consider working with the
56+
awesome [SignPath team](https://signpath.org/apply).
57+
58+
Finally, a huge thanks to [the SignPath team](https://about.signpath.io/team), and also a huge thanks to the users who
59+
love our application. :)
60+
61+
62+
## Further information
63+
64+
* [SignPath Code Signing for Open Source Software projects](https://signpath.org/about)
65+
* [SignPath Code Signing for Commercial projects](https://signpath.io/code-signing)
66+
* [Documentation for SignPath Code Signing](https://about.signpath.io/documentation/signing-code)

‎docs/blog/index.html‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,13 @@
6767

6868
<h2 class="archive-title">2024</h2>
6969

70+
<article class="archive-item">
71+
<a href="/blog/our-journey-with-signpath/" class="archive-item-link">Our journey with SignPath</a>
72+
<span class="archive-item-date">
73+
2024-11-08
74+
</span>
75+
</article>
76+
7077
<article class="archive-item">
7178
<a href="/blog/version-3-13-1-released/" class="archive-item-link">Version 3.13.1 released</a>
7279
<span class="archive-item-date">

‎docs/blog/index.xml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,18 @@
66
<description>Recent content in Blogs on DB Browser for SQLite</description>
77
<generator>Hugo -- gohugo.io</generator>
88
<language>en-us</language>
9-
<lastBuildDate>Wed, 16 Oct 2024 00:00:00 +0000</lastBuildDate><atom:link href="/blog/index.xml" rel="self" type="application/rss+xml" />
9+
<lastBuildDate>Fri, 08 Nov 2024 00:00:00 +0000</lastBuildDate><atom:link href="/blog/index.xml" rel="self" type="application/rss+xml" />
10+
<item>
11+
<title>Our journey with SignPath</title>
12+
<link>/blog/our-journey-with-signpath/</link>
13+
<pubDate>Fri, 08 Nov 2024 00:00:00 +0000</pubDate>
14+
15+
<guid>/blog/our-journey-with-signpath/</guid>
16+
<description>Our Journey with SignPath: Code Signing for Windows Binaries When distributing software, code signing is essential to ensure our users can trust the software they download, especially on an operating system like Windows that displays security warnings for unsigned software.
17+
So for us, code signing is not just an option, but a necessity to validate software binaries, prevent tampering, and for the convenience of our users.
18+
A Little Background on This Journey It&amp;rsquo;s not difficult to code sign and notarize software binaries for Apple macOS.</description>
19+
</item>
20+
1021
<item>
1122
<title>Version 3.13.1 released</title>
1223
<link>/blog/version-3-13-1-released/</link>

‎docs/blog/our-journey-with-signpath/index.html‎

Lines changed: 168 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,168 @@
1+
<!DOCTYPE html>
2+
<html lang="en-us">
3+
<head>
4+
<meta charset="utf-8">
5+
<meta name="viewport" content="width=device-width, initial-scale=1.0">
6+
<meta name="generator" content="Hugo 0.111.3">
7+
8+
9+
<title>Our journey with SignPath - DB Browser for SQLite</title>
10+
<meta property="og:title" content="Our journey with SignPath - DB Browser for SQLite">
11+
12+
13+
<link href='/favicon.ico' rel='icon' type='image/x-icon'/>
14+
15+
16+
17+
18+
19+
20+
21+
22+
<link href="https://sqlitebrowser.org/index.xml" rel="alternate" type="application/rss+xml" title="DB Browser for SQLite" />
23+
24+
25+
26+
<link rel="stylesheet" href="/css/fonts.css" media="all">
27+
28+
<link rel="stylesheet" href="/css/main.css" media="all">
29+
30+
31+
32+
33+
34+
</head>
35+
<body>
36+
<div class="wrapper">
37+
<header class="header">
38+
<nav class="nav">
39+
<a href="/" class="nav-logo">
40+
<img src="/images/sqlitebrowser.svg"
41+
width="50"
42+
height="50"
43+
alt="DB Browser for SQLite logo">
44+
</a>
45+
<ul class="nav-links">
46+
<li><a href="/about/">About</a></li>
47+
<li><a href="/dl/"><b>Download</b></a></li>
48+
<li><a href="/blog/">Blog</a></li>
49+
<li><a href="https://github.com/sqlitebrowser/sqlitebrowser/wiki">Docs</a></li>
50+
<li><a href="https://github.com/sqlitebrowser/sqlitebrowser">GitHub</a></li>
51+
<li><a href="https://gitter.im/sqlitebrowser/sqlitebrowser">Gitter</a></li>
52+
<li><a href="/stats/">Stats</a></li>
53+
<li><a href="https://www.patreon.com/db4s">Patreon</a></li>
54+
<li><a href="https://dbhub.io">DBHub.io</a></li>
55+
</ul>
56+
</nav>
57+
58+
</header>
59+
60+
61+
<main class="content" role="main">
62+
63+
<article class="article">
64+
65+
<span class="article-duration">2 min read</span>
66+
67+
68+
<h1 class="article-title">Our journey with SignPath</h1>
69+
70+
71+
<span class="article-date">2024-11-08</span>
72+
73+
74+
<div class="article-content">
75+
<h1 id="our-journey-with-signpath-code-signing-for-windows-binaries">Our Journey with SignPath: Code Signing for Windows Binaries</h1>
76+
<p>When distributing software, code signing is essential to ensure our users can trust the software they download,
77+
especially on an operating system like Windows that displays security warnings for unsigned software.</p>
78+
<p>So for us, code signing is not just an option, but a necessity to validate software binaries, prevent tampering, and
79+
for the convenience of our users.</p>
80+
<h2 id="a-little-background-on-this-journey">A Little Background on This Journey</h2>
81+
<p>It&rsquo;s not difficult to code sign and notarize software binaries for Apple macOS. In fact, there&rsquo;s only one option.</p>
82+
<p>However, for Windows binaries, there are a number of companies offering code signing services at varying costs, which
83+
made it difficult to choose. One of our team members learned about <a href="https://signpath.org">SignPath</a>,
84+
which provides free code signing services for FOSS projects, and it seemed like a logical choice for many reasons
85+
(&ldquo;free and seems legit&rdquo;), so we contacted the SignPath team.</p>
86+
<h2 id="the-challenge-we-faced">The Challenge We Faced</h2>
87+
<p>Getting started with code signing wasn&rsquo;t difficult, as SignPath provided us with well-written documentation. However,
88+
our existing CI/CD platform - GitHub Actions - wasn&rsquo;t supported by SignPath, so we needed to configure a new CI
89+
pipeline for AppVeyor to sign and deploy our software code.</p>
90+
<p>We learned that SignPath was also supporting GitHub Actions in a private beta, so we asked for access, which we
91+
received after a few weeks.</p>
92+
<p>There have been some minor bugs in the integration with GitHub Actions, but after reaching out to the SignPath team
93+
they were fixed within a few days.</p>
94+
<p>As a result, we&rsquo;re now successfully deploying code-signed Windows binaries to our users using our existing GitHub
95+
Actions.</p>
96+
<h2 id="personal-impressions-and-reflections">Personal Impressions and Reflections</h2>
97+
<p>We are now able to distribute code-signed Windows binaries to our users thanks to <a href="https://about.signpath.io/documentation/signing-code">SignPath&rsquo;s well-written
98+
documentation</a>, quick response to issues, and friendly support.</p>
99+
<p>We also appreciate the fact that they don&rsquo;t put a financial burden on FOSS projects. :D</p>
100+
<p>If you&rsquo;re looking to get your code signed for Windows binaries, I highly recommend that you consider working with the
101+
awesome <a href="https://signpath.org/apply">SignPath team</a>.</p>
102+
<p>Finally, a huge thanks to <a href="https://about.signpath.io/team">the SignPath team</a>, and also a huge thanks to the users who
103+
love our application. :)</p>
104+
<h2 id="further-information">Further information</h2>
105+
<ul>
106+
<li><a href="https://signpath.org/about">SignPath Code Signing for Open Source Software projects</a></li>
107+
<li><a href="https://signpath.io/code-signing">SignPath Code Signing for Commercial projects</a></li>
108+
<li><a href="https://about.signpath.io/documentation/signing-code">Documentation for SignPath Code Signing</a></li>
109+
</ul>
110+
111+
</div>
112+
</article>
113+
114+
115+
116+
117+
</main>
118+
119+
<footer class="footer">
120+
<ul class="footer-links">
121+
<li>
122+
<a href="https://sqlitebrowser.org/index.xml" type="application/rss+xml" target="_blank">RSS feed</a>
123+
</li>
124+
<li>
125+
<a href="https://twitter.com/sqlitebrowser" target="_blank">Twitter</a>
126+
</li>
127+
<li>
128+
<a href="/privacy-policy">Privacy policy</a>
129+
</li>
130+
</ul>
131+
<br />
132+
</footer>
133+
</div>
134+
135+
136+
137+
138+
139+
<script>
140+
(function(f, a, t, h, o, m){
141+
a[h]=a[h]||function(){
142+
(a[h].q=a[h].q||[]).push(arguments)
143+
};
144+
o=f.createElement('script'),
145+
m=f.getElementsByTagName('script')[0];
146+
o.async=1; o.src=t; o.id='fathom-script';
147+
m.parentNode.insertBefore(o,m)
148+
})(document, window, '//stats.sqlitebrowser.org/tracker.js', 'fathom');
149+
fathom('set', 'siteId', 'DWUMT');
150+
fathom('trackPageview');
151+
</script>
152+
153+
154+
155+
156+
<script src="https://utteranc.es/client.js"
157+
repo="sqlitebrowser/website"
158+
issue-term="pathname"
159+
label="utterances"
160+
theme="github-light"
161+
crossorigin="anonymous"
162+
async>
163+
</script>
164+
165+
166+
</body>
167+
</html>
168+

‎docs/categories/db4s/index.html‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,13 @@
6767

6868
<h2 class="archive-title">2024</h2>
6969

70+
<article class="archive-item">
71+
<a href="/blog/our-journey-with-signpath/" class="archive-item-link">Our journey with SignPath</a>
72+
<span class="archive-item-date">
73+
2024-11-08
74+
</span>
75+
</article>
76+
7077
<article class="archive-item">
7178
<a href="/blog/version-3-13-1-released/" class="archive-item-link">Version 3.13.1 released</a>
7279
<span class="archive-item-date">

‎docs/categories/db4s/index.xml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,18 @@
66
<description>Recent content in db4s on DB Browser for SQLite</description>
77
<generator>Hugo -- gohugo.io</generator>
88
<language>en-us</language>
9-
<lastBuildDate>Wed, 16 Oct 2024 00:00:00 +0000</lastBuildDate><atom:link href="/categories/db4s/index.xml" rel="self" type="application/rss+xml" />
9+
<lastBuildDate>Fri, 08 Nov 2024 00:00:00 +0000</lastBuildDate><atom:link href="/categories/db4s/index.xml" rel="self" type="application/rss+xml" />
10+
<item>
11+
<title>Our journey with SignPath</title>
12+
<link>/blog/our-journey-with-signpath/</link>
13+
<pubDate>Fri, 08 Nov 2024 00:00:00 +0000</pubDate>
14+
15+
<guid>/blog/our-journey-with-signpath/</guid>
16+
<description>Our Journey with SignPath: Code Signing for Windows Binaries When distributing software, code signing is essential to ensure our users can trust the software they download, especially on an operating system like Windows that displays security warnings for unsigned software.
17+
So for us, code signing is not just an option, but a necessity to validate software binaries, prevent tampering, and for the convenience of our users.
18+
A Little Background on This Journey It&amp;rsquo;s not difficult to code sign and notarize software binaries for Apple macOS.</description>
19+
</item>
20+
1021
<item>
1122
<title>Version 3.13.1 released</title>
1223
<link>/blog/version-3-13-1-released/</link>

‎docs/categories/index.html‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ <h2 class="archive-title">2024</h2>
7070
<article class="archive-item">
7171
<a href="/categories/db4s/" class="archive-item-link">db4s</a>
7272
<span class="archive-item-date">
73-
2024-10-16
73+
2024-11-08
7474
</span>
7575
</article>
7676

‎docs/categories/index.xml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,11 @@
66
<description>Recent content in Categories on DB Browser for SQLite</description>
77
<generator>Hugo -- gohugo.io</generator>
88
<language>en-us</language>
9-
<lastBuildDate>Wed, 16 Oct 2024 00:00:00 +0000</lastBuildDate><atom:link href="/categories/index.xml" rel="self" type="application/rss+xml" />
9+
<lastBuildDate>Fri, 08 Nov 2024 00:00:00 +0000</lastBuildDate><atom:link href="/categories/index.xml" rel="self" type="application/rss+xml" />
1010
<item>
1111
<title>db4s</title>
1212
<link>/categories/db4s/</link>
13-
<pubDate>Wed, 16 Oct 2024 00:00:00 +0000</pubDate>
13+
<pubDate>Fri, 08 Nov 2024 00:00:00 +0000</pubDate>
1414

1515
<guid>/categories/db4s/</guid>
1616
<description></description>

‎docs/index.html‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,13 @@ <h2 id="windows-code-signing-policy">Windows Code-Signing Policy</h2>
120120

121121
<h2 class="archive-title">2024</h2>
122122

123+
<article class="archive-item">
124+
<a href="/blog/our-journey-with-signpath/" class="archive-item-link">Our journey with SignPath</a>
125+
<span class="archive-item-date">
126+
2024-11-08
127+
</span>
128+
</article>
129+
123130
<article class="archive-item">
124131
<a href="/blog/version-3-13-1-released/" class="archive-item-link">Version 3.13.1 released</a>
125132
<span class="archive-item-date">

‎docs/index.xml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,18 @@
66
<description>Recent content on DB Browser for SQLite</description>
77
<generator>Hugo -- gohugo.io</generator>
88
<language>en-us</language>
9-
<lastBuildDate>Wed, 16 Oct 2024 00:00:00 +0000</lastBuildDate><atom:link href="/index.xml" rel="self" type="application/rss+xml" />
9+
<lastBuildDate>Fri, 08 Nov 2024 00:00:00 +0000</lastBuildDate><atom:link href="/index.xml" rel="self" type="application/rss+xml" />
10+
<item>
11+
<title>Our journey with SignPath</title>
12+
<link>/blog/our-journey-with-signpath/</link>
13+
<pubDate>Fri, 08 Nov 2024 00:00:00 +0000</pubDate>
14+
15+
<guid>/blog/our-journey-with-signpath/</guid>
16+
<description>Our Journey with SignPath: Code Signing for Windows Binaries When distributing software, code signing is essential to ensure our users can trust the software they download, especially on an operating system like Windows that displays security warnings for unsigned software.
17+
So for us, code signing is not just an option, but a necessity to validate software binaries, prevent tampering, and for the convenience of our users.
18+
A Little Background on This Journey It&amp;rsquo;s not difficult to code sign and notarize software binaries for Apple macOS.</description>
19+
</item>
20+
1021
<item>
1122
<title>Version 3.13.1 released</title>
1223
<link>/blog/version-3-13-1-released/</link>

0 commit comments

Comments
 (0)