fix(signing-utils): migrate to new Windows signing cert DEVPROD-13200 (#493)

drichmdb · web-flow · commit 527a501ca1f2 · 2024-12-06T19:46:24.000+01:00
DEVPROD-13200: Migrate to new Windows signing cert

This commit updates the certificate we use to sign to our new one for
the next three years. Ideally we would also update this to be
parameterized, but given that there are a few projects that depend on
this script, I think it's safer to make this update as-is now and decide
on templating later.
diff --git a/packages/signing-utils/src/garasign.sh b/packages/signing-utils/src/garasign.sh
@@ -57,7 +57,7 @@ jsign_sign() {
     -v $directory:$directory \
     -w $directory \
     ${ARTIFACTORY_HOST}/release-tools-container-registry-local/garasign-jsign \
-    /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2021' '$file'"
+    /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2024' '$file'"
 }
 
 rpm_gpg_sign() {

Original file line number	Diff line number	Diff line change
`@@ -57,7 +57,7 @@ jsign_sign() {`
`57`	`57`	`-v $directory:$directory \`
`58`	`58`	`-w $directory \`
`59`	`59`	`${ARTIFACTORY_HOST}/release-tools-container-registry-local/garasign-jsign \`
`60`		`- /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2021' '$file'"`
	`60`	`+ /bin/bash -c "jsign -t 'http://timestamp.digicert.com' -a 'mongo-authenticode-2024' '$file'"`
`61`	`61`	`}`
`62`	`62`
`63`	`63`	`rpm_gpg_sign() {`