DEVPROD-13200: Migrate to new Windows signing cert

drichmdb · drichmdb · commit 3605dca16bb7 · 2024-12-03T16:25:11.000Z
This commit updates the certificate we use to sign to our new one for
the next three years. Ideally we would also update this to be
parameterized, but given that there are a few projects that depend on
this script, I think it's safer to make this update as-is now and decide
on templating later.
diff --git a/packages/signing-utils/src/garasign.sh b/packages/signing-utils/src/garasign.sh
@@ -57,7 +57,7 @@ jsign_sign() {
     -v $directory:$directory \
     -w $directory \
     ${ARTIFACTORY_HOST}/release-tools-container-registry-local/garasign-jsign \
-    /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2021' '$file'"
+    /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2024' '$file'"
 }
 
 rpm_gpg_sign() {

Original file line number	Diff line number	Diff line change
`@@ -57,7 +57,7 @@ jsign_sign() {`
`57`	`57`	`-v $directory:$directory \`
`58`	`58`	`-w $directory \`
`59`	`59`	`${ARTIFACTORY_HOST}/release-tools-container-registry-local/garasign-jsign \`
`60`		`- /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2021' '$file'"`
	`60`	`+ /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2024' '$file'"`
`61`	`61`	`}`
`62`	`62`
`63`	`63`	`rpm_gpg_sign() {`