[tor-commits] [tor-browser-build/master] Bug 31988: Add script to generate a mar signing key for nightly builds

[boklm at torproject.org]

commit 930497f483bc85e056ed278e00edd3266c4fed47
Author: Nicolas Vigier <boklm at torproject.org>
Date:   Mon Dec 16 19:02:01 2019 +0100

    Bug 31988: Add script to generate a mar signing key for nightly builds
---
 tools/signing/nightly/.gitignore                     |  1 +
 tools/signing/nightly/create-nightly-mar-signing-key | 13 +++++++++++++
 2 files changed, 14 insertions(+)

diff --git a/tools/signing/nightly/.gitignore b/tools/signing/nightly/.gitignore
new file mode 100644
index 0000000..ec07f9a
--- /dev/null
+++ b/tools/signing/nightly/.gitignore
@@ -0,0 +1 @@
+nssdb
diff --git a/tools/signing/nightly/create-nightly-mar-signing-key b/tools/signing/nightly/create-nightly-mar-signing-key
new file mode 100755
index 0000000..e4138be
--- /dev/null
+++ b/tools/signing/nightly/create-nightly-mar-signing-key
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -e
+nssdb="$(dirname "$0")/nssdb"
+if test -d $nssdb
+then
+    echo "Error: $nssdb already exists" >&2
+    exit 1
+fi
+mkdir -p $nssdb
+chmod 700 $nssdb
+certutil -d $nssdb -N --empty-password
+certutil -d $nssdb -S -x -g 4096 -Z SHA384 -n nightly-marsigner -s "CN=Tor Browser Nightly MAR signing key" -t,,
+certutil -d $nssdb -L -r -n nightly-marsigner -o $nssdb/nightly-marsigner.der