1218757 - [NSec] Add a repo under B2G for package signing tool

Status: RESOLVED INVALID

(Core :: Security, defect)

Description

[Ethan Tseng [:ethan]]

If developers want to test Signed Package with New Security Model, they have to use the package signing tool to sign their packages. This tool is currently located in the repository:
https://github.com/johnathan79717/fxos-package-signing-tool

We should create a new and formal repository under B2G repo to place this tool.
Suggested name: "fxos-package-signing-tool" or simply "package-signing-tool".

Comment 1

[Jonathan Hao (inactive) [:jhao]]

We might want to use Paul's tool instead once he finishes it.
https://github.com/pauljt/fxos-sign-tool
It is more user-friendly for OS X users, since mine requires NSS tools and libraries.

Comment 2

[Ethan Tseng [:ethan]]

(In reply to Jonathan Hao [:jhao] from comment #1)
> We might want to use Paul's tool instead once he finishes it.
> https://github.com/pauljt/fxos-sign-tool
> It is more user-friendly for OS X users, since mine requires NSS tools and
> libraries.

Sounds good.
Let's wait for Paul's work. :)

Comment 3

[Ethan Tseng [:ethan]]

Close this bug since New Security Model project was stopped.