1578610 - Please create signing key for "Firefox for Fire TV"

Status: RESOLVED FIXED

(Cloud Services :: Operations: Autograph, task)

Description

[Mitchell Hentges [:mhentges] 🦀]

👋 :)

I'd like to have two keys for Firefox for Fire TV:

• signingscript_firefox_tv_release
• signingscript_firefox_tv_dep

This product needs the same kind of signing as other mobile apps like Fenix/Reference Browser/Focus.

Comment 1

[Greg G]

Attachment: dep cert parsed output

.

Comment 2

[Greg G]

Added rel and dep signers to the prod config using Hawk IDs: releng_firefox_tv_rel and releng_firefox_tv_dep since we've been switching to that from the signingscript_ prefix.

dep cert:

   99:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  104:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Mozilla Corporation

  129:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  134:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

  159:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  164:d=5  hl=2 l=  13 prim: PRINTABLESTRING   :Throwaway Key

  276:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  281:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Mozilla Corporation

  306:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  311:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

  336:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  341:d=5  hl=2 l=  13 prim: PRINTABLESTRING   :Throwaway Key

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Greg G]

rel cert:

   99:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  104:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Mozilla Corporation

  129:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  134:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

  159:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  164:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

  282:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  287:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Mozilla Corporation

  312:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  317:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

  342:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  347:d=5  hl=2 l=  19 prim: PRINTABLESTRING   :Release Engineering

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 4

[Greg G]

Attachment: prod cert info

Comment 5

[Greg G]

:mhentges do those params look right to you?

Comment 6

[Greg G]

Sent the autograph creds to Mitch and Johan.

Comment 7

[Mitchell Hentges [:mhentges] 🦀]

They look good so far, I'll verify it's working end-to-end later this week

Comment 8

[Greg G]

Great! Resolving as fixed and we can verify once it's deployed.

Comment 9

[Mitchell Hentges [:mhentges] 🦀]

I'm going to move the NI to Mihai, since this is being verified/resolved in 1598620

Comment 10

[Mihai Tabara [:mtabara]⌚️GMT]

Leaving the NI for now. Last I checked two days ago publishing to the Store + signing was still broken for Firefox-Tv so we'll have to look into that. Not sure if the credentials are to blame there so until I do more debugging, I'll keep the NI open.

Comment 11

[Mihai Tabara [:mtabara]⌚️GMT]

Removing the NI until/if this resurfaces.