commit 930497f483bc85e056ed278e00edd3266c4fed47 Author: Nicolas Vigier <boklm@torproject.org> Date: Mon Dec 16 19:02:01 2019 +0100 Bug 31988: Add script to generate a mar signing key for nightly builds --- tools/signing/nightly/.gitignore | 1 + tools/signing/nightly/create-nightly-mar-signing-key | 13 +++++++++++++ 2 files changed, 14 insertions(+) diff --git a/tools/signing/nightly/.gitignore b/tools/signing/nightly/.gitignore new file mode 100644 index 0000000..ec07f9a --- /dev/null +++ b/tools/signing/nightly/.gitignore @@ -0,0 +1 @@ +nssdb diff --git a/tools/signing/nightly/create-nightly-mar-signing-key b/tools/signing/nightly/create-nightly-mar-signing-key new file mode 100755 index 0000000..e4138be --- /dev/null +++ b/tools/signing/nightly/create-nightly-mar-signing-key @@ -0,0 +1,13 @@ +#!/bin/bash +set -e +nssdb="$(dirname "$0")/nssdb" +if test -d $nssdb +then + echo "Error: $nssdb already exists" >&2 + exit 1 +fi +mkdir -p $nssdb +chmod 700 $nssdb +certutil -d $nssdb -N --empty-password +certutil -d $nssdb -S -x -g 4096 -Z SHA384 -n nightly-marsigner -s "CN=Tor Browser Nightly MAR signing key" -t,, +certutil -d $nssdb -L -r -n nightly-marsigner -o $nssdb/nightly-marsigner.der