commit 9083e9cfec88befc9c566ba7d2b555c8e867738a Author: Georg Koppen gk@torproject.org Date: Fri Jun 16 11:07:47 2017 +0000

Updating the Authenticode signing instructions

We have a new signing key which results in a new ID on the token. --- processes/AuthenticodeSigning | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/processes/AuthenticodeSigning b/processes/AuthenticodeSigning index 453fb55..7829ef9 100644 --- a/processes/AuthenticodeSigning +++ b/processes/AuthenticodeSigning @@ -41,7 +41,7 @@ Signing and timestamping 1) Getting the certificate

- pkcs11-tool --module /usr/lib/libeTPkcs11.so --type cert --read-object \ - --id c27eac1b263465cdd73630d94b0b92e674f01501 > tpo_cert.der + --id 29643b7ac0003d8a882f8a4a6e064110d96b980b > tpo_cert.der - convert it to PEM: openssl x509 -in tpo_cert.der -inform der -outform pem \ -out tpo_cert.crt

@@ -57,7 +57,7 @@ Signing and timestamping - path/to/osslsigncode -pkcs11engine /usr/lib/engines/engine_pkcs11.so \ -pkcs11module /usr/lib/libeTPkcs11.so \ -certs tpo_cert.crt \ - -key c27eac1b263465cdd73630d94b0b92e674f01501 \ + -key 29643b7ac0003d8a882f8a4a6e064110d96b980b \ torbrowser-install-XXX.exe tb-XXX-signed.exe

- pass the passphrase to osslsigncode in case you want to script the whole