App Signing

Windows

We're signing the Windows installer using EVCS (Extended Validation Code Signing) certificate and CodeSignTool to sign the application.

In advance of the expiration of the previous account order a new one for the same Common Name. Specifying the same Common Name will make migrating to the new certificate seamless.
If you've found that the certificate was issued under a different name, then...
1. create an intermediate version using the previous certificate, but specifying all valid Common Names (for previous and new certificates) in the packager script win.publisherName
2. ensure that most of the network is updated to the newer version
3. release a new version using a new certificate

We're signing the App by providing CSC_LINK and CSC_PASSWORD of the certificate issued by our team in Apple Developer.

Afterward, it is also notarized using:

AppleID of one of developers from the team
Password — it is App-Specific password, you can generate one here: https://appleid.apple.com/account/manage
Team ID — you can find it here: https://developer.apple.com/account

Once it is expired you need to issue a new certificate: https://developer.apple.com/account/resources/ Administrative rights is required to issue the required certificate.

We're signing AppImage using gpg tool.

// TODO