[tbb-bugs] #23657 [Applications/Tor Browser]: Decide directories used for signed/unsigned builds in tor-browser-builds

[Tor Bug Tracker & Wiki]

#23657: Decide directories used for signed/unsigned builds in tor-browser-builds
--------------------------------------+--------------------------
 Reporter:  boklm                     |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by boklm):

 >  I think having different directories could also be useful if we want to
 add some scripts helping with the intermediate signing steps.

 I think some of the scripts/makefile targets that could be useful are:
 - uploading the unsigned dmg files to the osx signing machine
 - downloading the code signed osx tar.bz2 files
 - converting the code signed osx tar.bz2 to dmg files
 - uploading the exe files to the linux signing machine
 - downloading the signed exe files (with an rsync over the unsigned files)
 - timestamping the signed exe files
 - uploading the mar files to the linux signing machine for mar signing
 - uploading the signed+timestamped exe files to the linux signing machine
 (with an rsync ovec the previously uploaded ones), for gpg signing
 - uploading the code signed dmg files to the linux signing machine, for
 gpg signing

 > the dmg2mar target is using the signed directory. However at this point,
 only the dmg files are signed, so it is confusing to put all the files in
 the signed directory. Maybe an intermediate directory should be used
 instead?

 One option is to do that in an intermediate directory such as `signed-
 dmg`. An other option is to do it in the `unsigned` directory directly.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23657#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online