Open
Bug 1443938
Opened 7 years ago
Updated 2 years ago
Remove references to signing in build scripts
Categories
(Firefox Build System :: General, enhancement)
Tracking
(Not tracked)
NEW
People
(Reporter: kmoir, Unassigned)
References
Details
Attachments
(1 file)
13.06 KB,
patch
|
Details | Diff | Splinter Review |
Signing is now a discrete task in taskcluster so the signing support in build scripts can be removed and ride the trains
side note: I'm not sure how Linux distros sign their builds, I assume this doesn't impact them
from #releng
how do Linux distros sign their Firefox builds that they compile from source?
<kmoir> Kim Moir do they sign with their own certificate?
4:42 PM there's no signing of the binaries inside the package on linux
<•bhearsum> for our own builds, we only make detached gpg sigs for the tarballs
4:43 PM i'm not sure about distro builds, but i imagine they sign firefox builds in the same way they sign packages for any other thing they
kmoir> Kim Moir okay thanks
<Callek> basically "up to the distro"
4:59 PM but yea, generally they don't do gpg signing or any such stuff and rely on their package manager's cert/key stuff and hash pins for generated rpm/deb/etc
4:59 PM (that is "generally" what I recall seeing a long while back)
Reporter | ||
Updated•7 years ago
|
Assignee: nobody → kmoir
Reporter | ||
Comment 1•7 years ago
|
||
Updated•6 years ago
|
Version: Version 3 → 3 Branch
Reporter | ||
Updated•6 years ago
|
Assignee: kmoir → nobody
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•