Closed Bug 1296362 Opened 3 years ago Closed 3 years ago

Generate new SHA1 cert

Categories

(Release Engineering :: General, defect)

defect
Not set

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: rail, Assigned: rail)

References

Details

Our current SHA! authenticode cert is about to expire (Sep 2016). We need to generate a new one!
We started this process today. The certificate has been requested and approved by IT, and now we're waiting on DigiCert to create it. It looks like the usual turnaround is 48-72h.
We have the new cert, and I've dropped it into the same directory as the key on the signing machine. Rail, I think you can take it from here?
Yes, I will take care of it.
Also we need to update the backup usb keys.
I deployed the new cert today. catlee mentioned that we may need to get a backup cert.
Just checked the sha1 repacks at http://ftp.mozilla.org/pub/firefox/releases/49.0b8/win32-sha1/

They use the new cert and everything looks as expected.
All done here. MoTo safe updated.
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
See Also: → 1319473
For posterity, the key's serial number is 0d:2c:25:f8:db:b4:92:c8:50:c5:f1:35:9a:60:69:e7.

Certificate is:
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgIQDSwl+Nu0kshQxfE1mmBp5zANBgkqhkiG9w0BAQUFADBv
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS4wLAYDVQQDEyVEaWdpQ2VydCBBc3N1cmVkIElEIENv
ZGUgU2lnbmluZyBDQS0xMB4XDTE2MDgxODAwMDAwMFoXDTE5MDgyMzEyMDAwMFow
djELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1v
dW50YWluIFZpZXcxHDAaBgNVBAoTE01vemlsbGEgQ29ycG9yYXRpb24xHDAaBgNV
BAMTE01vemlsbGEgQ29ycG9yYXRpb24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQChR3Gp7VUKPjjfhlUQKuvKp76nUCumBQpAa0FCs6sUUL/OL/xCoa9K
kP7uLTlRyd49xZj0U2+GaxPoW18WKfPLp8CkNohkcoWp5Cs9LAe/4INEHVmfLR7v
RZlRcshQSs6ssH5lA5BtQ3FlWXIJrrJXQBHZ6lnW5j8lI/AehDd7Kzzcvvb99iHQ
Djd2JpFDox8xFq5JIaaxUSWc9CPnPeTi9tYioq7tecKtFDG+kfIry2tVYmLyTVCj
egUCeF7GXPBtuirHRFqIFFkoHgh7b4Kd3PdUXs5s2zEjA7yzv6mU/KmAz6dWuznJ
uiarL/dA2F5UBqsrBRCT7TWfmfUv0AZ4sp9kx4fkyfcWDPzcyKYfbGZZihRARX0D
r4nH8ywDXqVKKNVNnvQ/YJ4oHJ8naCWIry8smXuQxoX+aQrdIWb1cNpA25fbjNSP
qhPvRhmR/DY9+GjXg1Wsd/W997rswED1sErEbz8l+4QcRGqm1pllQmGZv8Ra5iYT
+eRjS4HWnke5h5HEPPumaqPRJRi9Mnt5RM680ovJIhWj78SKPF5yGqv/f9IMGYwG
u1chc9kthrDF+N0C3C0gCdR0+iOcSFmKXJ5t+DGRwo1mMU3A5d9lRFoKs0ujU9wy
sSKFWU3kmxWR+0d8nw6fGlUCgEef/z3Fy2z4Yw6aTSgBZLWOAatpBQIDAQABo4IB
uTCCAbUwHwYDVR0jBBgwFoAUe2jOKarAF75JeuHlP9an90WPNTIwHQYDVR0OBBYE
FGW1wednfbZkBCdVxyAxiSPSy8roMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAK
BggrBgEFBQcDAzBtBgNVHR8EZjBkMDCgLqAshipodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vYXNzdXJlZC1jcy1nMS5jcmwwMKAuoCyGKmh0dHA6Ly9jcmw0LmRpZ2lj
ZXJ0LmNvbS9hc3N1cmVkLWNzLWcxLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwD
ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG
BmeBDAEEATCBggYIKwYBBQUHAQEEdjB0MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wTAYIKwYBBQUHMAKGQGh0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRENvZGVTaWduaW5nQ0EtMS5jcnQwDAYD
VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAZrphYK61s6qC8XSfi0BgJyMp
RxsG0jBHDIq7AVM6Kp0IdSCdImKGn1xf+CY0+Hm2GCiNr/naTRo6eMDGUuRVL+4z
k/EzVrIX+51jfl+E9W2kYNMk7+2UbmWAeeMpuRI/zqIu/Uw8fexZ4RxaHR6k1wvx
3Cwk2D8+vpfU9Y1SWTlObU9e0lnhxAtSH0OIyQ4YxNppQ43qwOi6ZLI2WiWed4Ue
ChSTYcbaVtdyifQhgW7EjjxMrZaqG2hROWTmsWZJ6c+bx2/XJpVDbA4Pc4kuNAEN
1QnDdMZAzFRbwVAGqonfpji3GG5jp+PDvP1utXJY7Gf+MBZl4R19bvT9LpcYEg==
-----END CERTIFICATE-----
Component: General Automation → General
You need to log in before you can comment on or make changes to this bug.