I wonder how other open-source projects deal with code signing on Windows.
Originally we got a certificate for 5 years, due to industry changes, we were forced to re-issue it after 3.
Now PFX is not available, and you can either pay extra for a singing service or an expensive hardware token.
10 months ago