Posted by Lerzeel on Apr 06, 2023; 12:05pm
URL: https://forum.jogamp.org/Digital-signatures-for-native-libraries-tp4042391.html

Hi,

In our quest to have safer software, our release department asked me if the native DLL files (for JOGL 2.4.0) were available with digital signatures?
This would allow us to better verify the origin of these files.
Is this something that is already available, or could be added to the build pipeline?

In a second question they also asked about compiling with the GS compiler switch:
https://learn.microsoft.com/en-us/cpp/build/reference/gs-buffer-security-check?view=msvc-170
But I am no C expert, and am not sure if an equivalent exists for non-Windows or non-Visual Studio environments.
It would also impact performance a bit, but there are gains in the safer software department.

Any feedback on the above would be much appreciated,

Thanks