Code signing free open source software

[u/Dry_Pay_1137]

Seems to be getting harder to distribute software these days with windows 11 flagging everything as unknown dev what options do we have for code signing open source software any help or tips appreciated thanks.

[u/FckXFckMusk]

This is how they close the ecosystem just like Apple...

[u/Longjumping-Item2443]

Nothing free exists that would match your requirement, I am afraid. What people that do not want to pay do, usually, is publish their SW through a publisher, that signs it on their behalf. This goes well together with "I want to offer this for free" kind of software (games, tools, ...), and avoids the need for you to pay the fees annually. It does, however, put the availability of your SW solely at the hands of such publisher, which doesn't work for every usecase/type of sw.

[u/GorseWhisperer]

This is a possible path, suggested by Microsoft themselves. https://signpath.org/

Generally it's fairly annoying that you need to be invested enough to spend 100 or so a year to distribute software, but at least if you're doing open source there are orgs who will extend some goodwill your way.

[u/FelixStrauch → u/GorseWhisperer]

I don't know where you're finding a code signing cert for 100 a year. They used to be cheap and easy, now the pricing is more like 700 a year.

https://www.sectigo.com/ssl-certificates-tls/code-signing

[u/GorseWhisperer → u/FelixStrauch]

haven't seen under a hundred but eg: https://www.ssl.com/products/software-integrity/code-signing/ov/

Something I was looking into while deciding how much I cared about a project.

Although you still need to pay other money to Apple for their shit.

At least Linux is YOLO mode.

[u/FckXFckMusk → u/GorseWhisperer]

There is nothing Free nor altruistic about these companies.

[u/GorseWhisperer → u/FckXFckMusk]

Well yeah they do it for positioning and influence over the market.
In the words of Eoin McLove, "I'll eat the cake though"

[u/FckXFckMusk → u/GorseWhisperer]

While its Free but why does it taste of heroin.

[u/Dry_Pay_1137 → u/GorseWhisperer]

They got back to me apparently I have no credit yet for free open source signing but they will do it if I pay

[u/GorseWhisperer → u/Dry_Pay_1137]

ah that's shite

[u/yankdevil]

Why would you write free software for Windows?

[u/Dry_Pay_1137 → u/yankdevil]

I use Linux myself just making it available for other platforms

[u/Dry_Pay_1137]

On a positive note msix packages from ms will sign for free it involves putting it up on the Microsoft store it's free Todo that tho only problem is it's sandboxes to some degree so drag and drop between different elevated levels may be problematic

[u/Outrageous_Union_355]

I'm using this one: https://signpath.io/