Commit 980fe8ee authored by Mike Perry's avatar Mike Perry
Browse files

Signing notes

parent b03656fb

processes/KeyGeneration

+15 −0
Original line number Diff line number Diff line
@@ -63,3 +63,18 @@ Key Creation Incantations and Instructions 
6) `certutil -d nssdb -L -r -n marsigner -o marsigner.der`

7) If you want to export more than one certificate repeat step 6 adjusting the

   certificate nickname and the name of the output file





Mac Signing Key

===============



Based on:

https://stackoverflow.com/questions/9245149/jenkins-on-os-x-xcodebuild-gives-code-sign-error





cd Library/Keychains

security create-keychain tbb-signing-alpha.keychain

security default-keychain -s tbb-signing-alpha.keychain

security unlock-keychain

certtool r CertificateSigningRequest.certSigningRequest

processes/ReleaseProcess

+2 −0
Original line number Diff line number Diff line
@@ -91,6 +91,8 @@ 
   # We must use $TORBROWSER_VERSION here because signed result dirs should omit the build number suffix

   rsync -avP $TORBROWSER_VERSION staticiforme.torproject.org:/srv/dist-master.torproject.org/htdocs/torbrowser/

   ssh staticiforme.torproject.org "chmod g+w,o+r -R /srv/dist-master.torproject.org/htdocs/torbrowser/*"

   ssh staticiforme.torproject.org "chown -R :torwww /srv/dist-master.torproject.org/htdocs/torbrowser/"

   ssh staticiforme.torproject.org "cd /srv/dist-master.torproject.org/htdocs/torbrowser/$TORBROWSER_VERSION ; for i in *.asc; do echo $i ; gpg -q $i || break; done"

   ssh staticiforme.torproject.org "static-update-component dist.torproject.org"

#. Local to staticiforme:

   cd ~/tbb-builds/tor-browser-bundle/gitian