1942344 - switch to new authenticode cert issued in january 2025

Status: RESOLVED FIXED

(Release Engineering :: Release Automation, task)

Description

[[e-mail] (:bhearsum)]

See https://mozilla-hub.atlassian.net/browse/AUT-291 and linked issues for info on the new cert.

Notably, this is only in the new autograph gcp production environment. So there's some wiring in to do around that, in addition to the usual things.

There are no changes to issuers or subjects as part of this, unlike the last time we did this.

Comment 1

[[e-mail] (:bhearsum)]

Attachment: import new cert into signingscript

Comment 2

[[e-mail] (:bhearsum)]

This switch will happen when we cut over to autograph gcp prod in https://bugzilla.mozilla.org/show_bug.cgi?id=1942364

Comment 3

[[e-mail] (:bhearsum)]

autoland & central are switched over. This change will ride naturally with 137 to beta & release. Sometime next month I'll be backporting https://bugzilla.mozilla.org/show_bug.cgi?id=1942364 to esr115 and esr128.

I'm calling this fixed seeing as it's working for Nightly already, and all the remaining work is tracked in https://bugzilla.mozilla.org/show_bug.cgi?id=1942364.