[tor-bugs] #11300 [Tor Sysadmin Team]: Find a secure signing machine for TBB signing

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jun 9 13:19:05 UTC 2014


#11300: Find a secure signing machine for TBB signing
-----------------------------------+----------------------
     Reporter:  mikeperry          |      Owner:
         Type:  task               |     Status:  assigned
     Priority:  normal             |  Milestone:
    Component:  Tor Sysadmin Team  |    Version:
   Resolution:                     |   Keywords:
Actual Points:                     |  Parent ID:  #11299
       Points:                     |
-----------------------------------+----------------------

Comment (by mikeperry):

 The situation on MacOS is looking pretty grim. There is an experimental
 security tool called ldid that a few people have forked:
 http://iphonedevwiki.net/index.php/Ldid
 https://github.com/rpetrich/ldid

 However, that doesn't seem to work as an actual signing tool. In fact,
 when some guy tried to script signing of a Linux-created DMG over SSH, he
 ultimately gave up and went back to building DMGs on Mac:
 http://www.elstensoftware.com/blog/2013/04/17/scripting-dmg-build-osx-
 linux/

 Ugly.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11300#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list