Opened 7 months ago

Last modified 6 months ago

#33803 accepted task

Generate a second mar signing key for nightly

Reported by: boklm Owned by: sysrqb
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: TorBrowserTeam202004
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


We currently have only one mar signing key accepted by the nightly builds. To plan for rotation of the key, we should generate a second one in advance (offline), and add it as toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der.

Child Tickets

Change History (3)

comment:1 Changed 7 months ago by boklm

We are currently adding the nightly key in tor-browser-build.git, in projects/firefox/build. But alpha/stable keys are added in a tor-browser.git commit, and there is no reason to do it differently for nightly. So while doing this change, we can move the nightly keys to tor-browser.git.

comment:2 Changed 6 months ago by boklm

Someone else from the team should be creating this second mar signing key, to migrate to it after #33948 is done.

comment:3 Changed 6 months ago by sysrqb

Owner: changed from tbb-team to sysrqb
Status: newaccepted
Note: See TracTickets for help on using tickets.