Skip to content

chore: rotate Apple signing identity to bdd@pomerium.com#650

Merged
desimone merged 1 commit intomainfrom
bdd/ope-244-apple-cert-rotation
Mar 31, 2026
Merged

chore: rotate Apple signing identity to bdd@pomerium.com#650
desimone merged 1 commit intomainfrom
bdd/ope-244-apple-cert-rotation

Conversation

@desimone
Copy link
Copy Markdown
Contributor

@desimone desimone commented Mar 31, 2026

Summary

  • Replace Ross Smith's Distribution cert fingerprint (07205C57...) with Bobby's new Developer ID Application cert (247F4DF4E206B054A93A737A7AFF1284F2C47F32)
  • Update apple_id.username from rsmith@pomerium.com to bdd@pomerium.com in both gon configs

Context

OPE-244 / ENG-3479. Part of the Apple cert rotation -- old Ross Smith certs expire 2026-04-25.

Test plan

  • Merge after mac-builds PR is verified
  • Verify next CLI release signs and notarizes correctly -- v0.32.1-rc.1 PASSED, locally verified with codesign --verify and pkgutil --check-signature

AI Disclosure

PR created with AI assistance. Changes reviewed by Bobby.

Replace Ross Smith's Distribution cert fingerprint and rsmith@pomerium.com
notarization account with Bobby's new Developer ID Application cert and
bdd@pomerium.com account.

OPE-244
@desimone desimone requested a review from a team as a code owner March 31, 2026 17:11
@desimone desimone requested a review from calebdoxsey March 31, 2026 17:11
@desimone desimone merged commit db41927 into main Mar 31, 2026
9 of 10 checks passed
@desimone desimone deleted the bdd/ope-244-apple-cert-rotation branch March 31, 2026 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants