[cbi-dev] New signing services URLs and new releases of the cbi-maven-pl

[Mikael Barbero <mikael.barbero@xxxxxxxxxxxxxxxxxxxxxx>]

Hi,

(cross posted to cbi-dev and cross-projects mailing lists)

The various signing services URLs have changed:

Java Jarsigner http://build.eclipse.org:31338/sign -> https://cbi.eclipse.org/jarsigner/sign 

Windows portable executable signing http://build.eclipse.org:31338/winsign.php -> https://cbi.eclipse.org/authenticode/sign 

macOS bundle (.app, .pkg...) signing http://build.eclipse.org:31338/macsign.php -> https://cbi.eclipse.org/macos/codesign/sign 

macOS DMG package creator http://build.eclipse.org:31338/dmg-packager -> https://cbi.eclipse.org/macos/packager/dmg/create

macOS notarization direct IP -> https://cbi.eclipse.org/macos/xcrun 

Remember, those URLs are only available from within the Eclipse Foundation infrastructure. The old URLs are still available but this will change at some point (follow bug 565644 for updates).

A new version of the maven plugins (v1.3.0) have been released where the default URLs are now the new values. Using the new URLs is then as easy as just upgrading the plugins version in your pom.xml.

A another release (v1.3.1) just adds support for .dll signing and reinstate .msi signing on windows. 

If you don't use the maven plugins but curl (or any other http client) to call the signing services, you should update the URLs in your scripts manually. We will issue some reminders and will do some brownouts as part of https://bugs.eclipse.org/bugs/show_bug.cgi?id=565644 before turning off the URLs, but the sooner the better ;)

Cheers,

Mikaël Barbero 

Manager — Release Engineering and Technology | Eclipse Foundation

🐦 @mikbarbero

Eclipse Foundation: The Platform for Open Innovation and Collaboration

Attachment: signature.asc
Description: Message signed with OpenPGP