1346968 - apk release signing bustage

Status: RESOLVED FIXED

(Release Engineering :: Release Automation: Other, enhancement)

Description

[Aki Sasaki (not active)]

After bug 1340093 landed, release signing broke for apks.

After some digging, it turns out we have a SHA1withRSA release key, but SHA1withDSA nightly key.

# http://stackoverflow.com/questions/10103657/how-to-print-the-public-key-of-a-certificate-using-keytool
# to find sigalg:
keytool -keystore secrets/jar -list -rfc -alias nightly
# write to client.crt
keytool -printcert -file client.crt

We can't back out bug 1340093 without also backing out Bug 1330996.

We're choosing to fail forward: add -sigalg config support.  We'll need to adjust the solution for bug 1346296 as well.

Comment 1

[Aki Sasaki (not active)]

Attachment: puppet.patch

Comment 2

[Aki Sasaki (not active)]

https://hg.mozilla.org/build/puppet/rev/8be46cf946da39975a1de5c00c6557d0ca52aa6a
bug 1346968 - add jar_{sig,digest}alg to signscript.ini. r=catlee

Comment 3

[Aki Sasaki (not active)]

https://hg.mozilla.org/build/tools/rev/ba5740d844fa742fd1f2e63c35344e82f4503365
bug 1346968 - add jar signing {digest,sig}alg support. p=catlee r=aki

Comment 4

[Chris AtLee [:catlee]]

Attachment: Bug 1346968: Parameterize signing and digest algorithsm for jar signing

Review commit: https://reviewboard.mozilla.org/r/119834/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/119834/

Comment 5

[Aki Sasaki (not active)]

Comment on attachment 8846841 [details]
Bug 1346968: Parameterize signing and digest algorithsm for jar signing

https://reviewboard.mozilla.org/r/119834/#review121716

Comment 6

[Aki Sasaki (not active)]

Rolled out.  Cleaned up signing4 rel patched tools repo.  Cleaned up my tmpfiles.  Release signing works on m-b and jamun.  Nightly signing works on date.  -> reso fixed.