We no longer have signed binaries of Fedora Media Writer and the latest ones that are signed and published on getfedora.org are outdated. Instead, it would be great if we point to GitHub release page instead. Link to Flathub can be kept.
Release page: https://github.com/FedoraQt/MediaWriter/releases
Issue status updated to: Open (was: Closed)
Please, could you refile this to websites? Closing the issue, but feel free to reopen if necessary
Metadata Update from @phsmoura: - Issue close_status updated to: upstream - Issue status updated to: Closed (was: Open) - Issue tagged with: low-gain, low-trouble, ops
Metadata Update from @phsmoura: - Issue untagged with: low-gain, low-trouble, ops
Wait, what happened to our signing process for FMW builds?
https://github.com/FedoraQt/MediaWriter/issues/641
Long story short: The certs we used are expired and the new ones require a completely different (more complex) process to sign binaries. We didn't figure this out yet.
Metadata Update from @james: - Issue assigned to james
Metadata Update from @james: - Issue assigned to kevin (was: james)
We should be able to reuse pesign infrastructure for this, since it's the same mechanical process. And IIRC the pesign infra now supports HSMs.
Metadata Update from @james: - Assignee reset - Issue tagged with: medium-gain, medium-trouble
We could not find a way to make the windows signing process work for us. macos was still possible, but even there they were changing a lot of the process.
@humaton spent a long while last year trying to find something that would work and couldn't.
I guess he has more details...
Log in to comment on this ticket.