Opened 9 years ago

Closed 3 years ago

Last modified 18 months ago

#1877 closed task (fixed)

Create repository and package signing keys

Reported by: erinn Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: weasel, proper@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

If we're going to be offering users nightly/weekly package builds, we want to offer them some modicum of proof that they came from us, and are what they claim to be, to the best of a robot's ability to verify them. The current plan is that all release builds/packages will be signed by hand, but for the nightlies/weeklies/whateverlies we need to create signing keys that can sign things automatically.

Child Tickets

Change History (10)

comment:1 Changed 9 years ago by erinn

Milestone: Deliverable-Mar2011Deliverable-December2010
Status: newaccepted

comment:2 Changed 7 years ago by proper

Cc: proper@… added

comment:3 Changed 6 years ago by arma

Still want to do it this way?

comment:4 Changed 6 years ago by erinn

I think so, but I haven't spent much/any time thinking about building nightlies in a while. weasel might have some input?

comment:5 Changed 5 years ago by erinn

Keywords: needs-triage added

comment:6 Changed 3 years ago by bugzilla

Component: Applications/Tor bundles/installationApplications/Tor Browser
Keywords: needs-triage removed
Milestone: Deliverable-December2010
Owner: changed from erinn to tbb-team
Parent ID: #18867
Severity: Normal
Status: acceptedassigned

comment:7 Changed 3 years ago by gk

Resolution: fixed
Status: assignedclosed

Done. We have such nightlies by now.

comment:8 Changed 3 years ago by adrelanos

Which (Debian?) repository / package contains the signing keys for nightly/weekly package builds?

comment:9 in reply to:  8 Changed 3 years ago by gk

Replying to adrelanos:

Which (Debian?) repository / package contains the signing keys for nightly/weekly package builds?

None. The description of the ticket shows that creating such a thing was not the intention.

comment:10 Changed 18 months ago by boklm

Parent ID: #18867
Note: See TracTickets for help on using tickets.