Skip to content

Conversation

@chrisd8088
Copy link
Member

The Git LFS signing certificate for Windows binaries has changed, so we update the default signing certificate SHA-1 hash in the Makefile.

(The last update was in commit 16eec17 of PR #4946 in 2022.)

The commands used to generate this hash were:

$ openssl pkcs12 -info -in codesign.pfx -out codesign.pem
$ openssl x509 -text -in codesign.pem -fingerprint | \
  grep Fingerprint | sed 's/^SHA1 Fingerprint=//' | \
  sed 's/://g' | tr [:upper:] [:lower:]

The Git LFS signing certificate for Windows binaries has changed, so
we update the default signing certificate SHA-1 hash in the Makefile.

(The last update was in commit 16eec17
of PR git-lfs#4946 in 2022.)

The commands used to generate this hash were:

openssl pkcs12 -info -in codesign.pfx -out codesign.pem
openssl x509 -text -in codesign.pem -fingerprint | \
  grep Fingerprint | sed 's/^SHA1 Fingerprint=//' | \
  sed 's/://g' | tr [:upper:] [:lower:]
@chrisd8088 chrisd8088 requested a review from a team as a code owner March 1, 2023 22:38
@chrisd8088
Copy link
Member Author

Just FYI to @git-lfs/core reviewers -- the failing Windows CI check in t/t-track.sh appears to be a relatively recent phenomenon, which exists in main as well and is unrelated to this PR's change.

@chrisd8088 chrisd8088 merged commit 1bbf8ba into git-lfs:main Mar 2, 2023
@chrisd8088 chrisd8088 deleted the update-windows-cert-sha1 branch March 2, 2023 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants