Forum How do I...?

Trusted binaries

jascroftleigh
Hi,

I would like to setup my Jenkins continuous integration server to always run our PDF jobs against the latest version of Prince XML. Unfortunately, I don't see a way for it to verify the downloads are genuine.

Can you serve the binaries over HTTPS? Is there a GPG key used to sign the binaries for Ubuntu?

What is the recommended way to get a trusted version of PrinceXML?

Thanks,

James
mikeday
We don't have signed Ubuntu packages at the moment. Perhaps we can add this for the next release.
jascroftleigh
Actually, just allowing me to, optionally, access the downloads from https://www.princexml.com/download/ (note: https) would be my preferred option.
mikeday
An entirely reasonable request, but it will take some time for us to setup the necessary SSL certificate.
jascroftleigh
No rush :) It is just a suggestion