[BangPypers] trust/certify python exe

Baiju M baiju.m.mail at gmail.com
Mon Feb 4 07:38:09 CET 2013


Hi Nithin,

Those individuals keys will be signed by many others.  Sometimes during
key signing party:
http://en.wikipedia.org/wiki/Key_signing_party

See somebody who you can trust has been signed those keys.


On Mon, Feb 4, 2013 at 11:37 AM, Nitin Kumar <nitin.nitp at gmail.com> wrote:
> Thanks Baiju,
>
> But as the link suggest "Source and binary executables are signed by the
> release manager using *their* OpenPGP key"
> These personal signature wont work. Isn't there any sign from trusted
> source say
> Microsoft, verisign etc?
>
> Nitin K
>
>
> Nitin K
>
>
> On Fri, Feb 1, 2013 at 3:44 PM, Baiju M <baiju.m.mail at gmail.com> wrote:
>
>> Hi Nitin,
>>
>> The procedure to verify Python EXEs is given here (using PGP/GPG):
>> http://www.python.org/download/#openpgp-public-keys
>>
>> On Fri, Feb 1, 2013 at 3:16 PM, Nitin Kumar <nitin.nitp at gmail.com> wrote:
>> > Hi All,
>> >
>> > I am trying to automate one of the application.
>> > This application (few fuctions which need high security) allow only those
>> > exe to access there APIs which are trusted.
>> >
>> > As python is not trusted, is there way we can trust/certify python
>> exe/dlls?
>> >
>> > I tried blow command but of no use for me
>> >
>> > d:\visual studio 2010p\vc\bin>signtool sign /a c:\Python27\python.exe
>> > SignTool Error: No certificates were found that met all the given
>> criteria.
>> >
>> > --
>> > Nitin K
>> > _______________________________________________
>> > BangPypers mailing list
>> > BangPypers at python.org
>> > http://mail.python.org/mailman/listinfo/bangpypers
>> _______________________________________________
>> BangPypers mailing list
>> BangPypers at python.org
>> http://mail.python.org/mailman/listinfo/bangpypers
>>
> _______________________________________________
> BangPypers mailing list
> BangPypers at python.org
> http://mail.python.org/mailman/listinfo/bangpypers


More information about the BangPypers mailing list