720777 - Please add a release MAR signing key to the database of known keys

Status: RESOLVED FIXED

(Toolkit :: Application Update, defect)

Description

[Rail Aliiev [:rail]]

Attachment: release MAR signing public key

Attached is the public MAR signing key for release builds (betas and final ones). See bug 718804 for the details.

Comment 1

[Brian R. Bondy [:bbondy]]

Is this bug relating to the work on my end? I.e. to make sure updater.exe knows about this key?

Comment 2

[Rail Aliiev [:rail]]

(In reply to Brian R. Bondy [:bbondy] from comment #1)
> Is this bug relating to the work on my end? I.e. to make sure updater.exe
> knows about this key?

yup, I was following https://bugzilla.mozilla.org/show_bug.cgi?id=701087#c1

BTW, it seems like the cert is valid only for 3 months. Let me know if I should regenerate it with different command line parameters.

Comment 3

[Brian R. Bondy [:bbondy]]

I think it would be best to generate in the past that way nothing will change after 3 months. We do not use the expiry aspect of the cert.  CCing bsmith and catlee in case they disagree with what I proposed.

Comment 4

[Rail Aliiev [:rail]]

Attachment: release MAR signing public key

(In reply to Brian R. Bondy [:bbondy] from comment #3)
> I think it would be best to generate in the past that way nothing will
> change after 3 months. We do not use the expiry aspect of the cert.  CCing
> bsmith and catlee in case they disagree with what I proposed.

Great idea. Attached is a public key generated 2011-09-24 (4 months ago).

Comment 5

[Rail Aliiev [:rail]]

Comment on attachment 591258 [details]
release MAR signing public key

Typo in the subject, will regenerate. sorry for the nose.

Comment 6

[Rail Aliiev [:rail]]

Attachment: release MAR signing public key

The correct one. I hope :)

Comment 7

[Brian R. Bondy [:bbondy]]

Thanks for the cert Rail, we need a secondary cert as well though.  The secondary cert won't be used initially, but it should be kept in a safe place in case we ever need to use it.  Please attach another for that.

Comment 8

[Brian R. Bondy [:bbondy]]

I included the first cert in Bug 704285, I still the second one though.

Comment 9

[Rail Aliiev [:rail]]

Attachment: second release public certificate

Comment 10

[Brian R. Bondy [:bbondy]]

I included these certs inside the patch in bug 704285. I'm going to mark this as resolved.