Bug 1385780 - sign mar files using the sha384 certificate. r=bhearsum, a=app_update_sha384
authorRobert Strong <robert.bugzilla@gmail.com>
Mon, 31 Jul 2017 10:34:43 -0700
changeset 423077 87824406b9feb420a3150720707b424d7cee5915
parent 423076 7f9ed540c8271bb58f671b91a2834900cda66f1f
child 423167 8b19670d12fde57d3aee50a5a7d1c734d9b709d5
push id1517
push userjlorenzo@mozilla.com
push dateThu, 14 Sep 2017 16:50:54 +0000
treeherdermozilla-release@3b41fd564418 [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbhearsum, app_update_sha384
bugs1385780
milestone56.0a1
first release with
nightly linux32
87824406b9fe / 56.0a1 / 20170731175927 / files
nightly linux64
87824406b9fe / 56.0a1 / 20170731175927 / files
nightly mac
87824406b9fe / 56.0a1 / 20170731175927 / files
nightly win32
87824406b9fe / 56.0a1 / 20170731175927 / files
nightly win64
87824406b9fe / 56.0a1 / 20170731175927 / files
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
releases
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1385780 - sign mar files using the sha384 certificate. r=bhearsum, a=app_update_sha384
taskcluster/taskgraph/transforms/build_signing.py
taskcluster/taskgraph/transforms/nightly_l10n_signing.py
taskcluster/taskgraph/transforms/repackage_signing.py
--- a/taskcluster/taskgraph/transforms/build_signing.py
+++ b/taskcluster/taskgraph/transforms/build_signing.py
@@ -83,17 +83,17 @@ def _generate_upstream_artifacts(build_p
         if is_nightly:
             artifacts_specificities[0]['artifacts'] += ['public/build/setup-stub.exe']
     elif 'linux' in build_platform:
         artifacts_specificities = [{
             'artifacts': ['public/build/target.tar.bz2'],
             'format': 'gpg',
         }, {
             'artifacts': ['public/build/update/target.complete.mar'],
-            'format': 'mar',
+            'format': 'mar_sha384',
         }]
     else:
         raise Exception("Platform not implemented for signing")
 
     return [{
         'taskId': {'task-reference': '<build>'},
         'taskType': 'build',
         'paths': specificity['artifacts'],
--- a/taskcluster/taskgraph/transforms/nightly_l10n_signing.py
+++ b/taskcluster/taskgraph/transforms/nightly_l10n_signing.py
@@ -59,17 +59,17 @@ def make_signing_description(config, job
             ]
         elif 'linux' in dep_platform:
             job_specs = [
                 {
                     'artifacts': ['public/build/{locale}/target.tar.bz2'],
                     'format': 'gpg',
                 }, {
                     'artifacts': ['public/build/{locale}/target.complete.mar'],
-                    'format': 'mar',
+                    'format': 'mar_sha384',
                 }
             ]
         else:
             raise Exception("Platform not implemented for signing")
 
         upstream_artifacts = []
         for spec in job_specs:
             fmt = spec['format']
--- a/taskcluster/taskgraph/transforms/repackage_signing.py
+++ b/taskcluster/taskgraph/transforms/repackage_signing.py
@@ -63,25 +63,25 @@ def make_repackage_signing_description(c
 
         locale_str = ""
         if dep_job.attributes.get('locale'):
             treeherder['symbol'] = 'tc-rs({})'.format(dep_job.attributes.get('locale'))
             attributes['locale'] = dep_job.attributes.get('locale')
             locale_str = "{}/".format(dep_job.attributes.get('locale'))
 
         scopes = [get_signing_cert_scope(config),
-                  "project:releng:signing:format:mar"]
+                  "project:releng:signing:format:mar_sha384"]
 
         upstream_artifacts = [{
             "taskId": {"task-reference": "<repackage>"},
             "taskType": "repackage",
             "paths": [
                 "public/build/{}target.complete.mar".format(locale_str),
             ],
-            "formats": ["mar"]
+            "formats": ["mar_sha384"]
         }]
         if 'win' in dep_job.attributes.get('build_platform'):
             upstream_artifacts.append({
                 "taskId": {"task-reference": "<repackage>"},
                 "taskType": "repackage",
                 "paths": [
                     "public/build/{}target.installer.exe".format(locale_str),
                 ],