kiwix
Do we continue one more year with SSL.com for code signing
In https://github.com/kiwix/overview/issues/88, we've decided to use SSL.com for code signin.
We've bought 1200 sign operations, and as of today 750 remains (but this year has been a bit special probably, since we've not much update WikiVoyage for instance).
Renewal will be on Jul 10, 2025 (but we need to get prepared).
Does someone has strong arguments / needs / desire to change or do we continue ?
It sure is not representative in that:
- More than expected signatures to deploy the tools and workflows.
- Less than expected given custom apps could not be released as usual due to missing ZIMs.
That said, we started in late August and are on a path to using 900 out of our 1,200 quota.
There is thus no forseeable risk in continuing. I'd advise we only renew for a year, hoping to have a better view next year. Given we monitor those weekly, we can still take actions should we start running low.
I'm also in favor of renewing for one or two years. On the longer term, this will probably change and we have made a few steps in that direction already, but this is still too early.
Their UI is terrible so I have no idea but:
- Did you click a renew button or place a different order?
- Did you submit the documents their apparently request? It says it's pending several validation.
- It seems we've wasted a month-worth by renewing now. It would expire on ~2026-06-12
Please open a new ticket once the cert is available so we can track deployment.