[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41218: Use new Tor Browser gpg subkey for signing stable releases

Title: GitLab

boklm pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build

Commits:

  • 3f16675b
    by Nicolas Vigier at 2024-08-21T13:08:19+02:00 
    Bug 41218: Use new Tor Browser gpg subkey for signing stable releases

With #40964 we started using a new subkey for signing alpha releases.
We now start using the new subkey for signing stable releases too.

3 changed files:

Changes:

  • tools/signing/linux-signer-gpg-sign
    ... ... @@ -4,8 +4,6 @@ set -e
    4 4 
     script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
    5 5 
     source "$script_dir/functions"
    6 6
    7 
    -test "$tbb_version_type" = "alpha" && export GPG_NEWSUBKEY=1
    8 
    -
    9 7 
     cd ~/"$SIGNING_PROJECTNAME-$tbb_version"
    10 8
    11 9 
     test -n "$GPG_PASS" || read -sp "Enter gpg passphrase: " GPG_PASS

  • tools/signing/machines-setup/sudoers.d/sign-gpg
    1 
    -Defaults>signing-gpg env_keep += "SIGNING_PROJECTNAME GPG_NEWSUBKEY"
    1 
    +Defaults>signing-gpg env_keep += SIGNING_PROJECTNAME
    2 2 
     %signing ALL = (signing-gpg) NOPASSWD: /signing/tor-browser-build/tools/signing/wrappers/sign-gpg

  • tools/signing/wrappers/sign-gpg
    ... ... @@ -11,6 +11,5 @@ if test $(whoami) != 'signing-gpg'; then
    11 11 
       exit 1
    12 12 
     fi
    13 13
    14 
    -gpg_subkey='0xe53d989a9e2d47bf!'
    15 
    -test -n "$GPG_NEWSUBKEY" && gpg_subkey='0x157432CF78A65729!'
    14 
    +gpg_subkey='0x157432CF78A65729!'
    16 15 
     exec gpg --homedir /home/signing-gpg/.gnupg -absu "$gpg_subkey" --batch --no-tty -o- --passphrase-fd 0 -- "$1"

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help 

    _______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits