1047252 - (addons-CA) Mozilla add-ons code-signing certificate authority

Status: RESOLVED DUPLICATE of bug 1070155

(addons.mozilla.org Graveyard :: Admin/Editor Tools, enhancement)

Description

[Daniel Veditz [:dveditz]]

We need to set up a secure back-end to create a Certificate Authority to issue object-signing certificates for add-on signing. This service/CA would be an extremely juicy target so it needs to be set up quite carefully and with limited access.

There will be two separate paths that will need to get certificates from this service: 1) part of the AMO publishing process will sign add-ons internally, and 2) issuing certs to developers who meet the criteria.

Comment 1

[Wil Clouser [:clouserw]]

Since this is kind of a tracking bug, I'll dupe it to the tracking bug for implementation.  Please see https://wiki.mozilla.org/AMO/SigningService for the plan and bugs.