Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-49905

Jenkins core build should verify Remoting code signing during the release

    XMLWordPrintable

Details

    Description

      Follow-up to JENKINS-31562.

      It would be great to have a test which verifies Remoting certificates on the master side. It would prevent the Core from pulling in an updated package OR from releasing with improperly signed artifact.

      Attachments

        Issue Links

          relates to

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-31562 Remoting release process should fail if the certificate is outdated.

          • Major - Major loss of function.
          • Resolved

          Activity

            Ascending order - Click to sort in descending order
            oleg_nenashev Oleg Nenashev created issue -
            oleg_nenashev Oleg Nenashev added a comment -

            It is newbie friendly, because the code signing code is already available in Remoting's pom.xml. Somebody needs to reapply it to the core

            oleg_nenashev Oleg Nenashev added a comment - It is newbie friendly, because the code signing code is already available in Remoting's pom.xml. Somebody needs to reapply it to the core
            oleg_nenashev Oleg Nenashev made changes -
            Field Original Value New Value
            Link This issue relates to JENKINS-31562 [ JENKINS-31562 ]
            lrossett Leonardo Rossetti added a comment -

            I would like to work on this one if possible

            lrossett Leonardo Rossetti added a comment - I would like to work on this one if possible
            oleg_nenashev Oleg Nenashev added a comment -

            lrossett feel free to work on it, I will be happy to review it and get it delivered

            oleg_nenashev Oleg Nenashev added a comment - lrossett feel free to work on it, I will be happy to review it and get it delivered
            lrossett Leonardo Rossetti made changes -
            Assignee Leonardo Rossetti [ lrossett ]
            lrossett Leonardo Rossetti made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            andreineagu Andrei Neagu made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            oleg_nenashev Oleg Nenashev added a comment -

            Hi. JENKINS-49905 is not completed from my PoV, I am not sure why it was closed without explanation. It is NOT about Remoting, it is about Jenkins core

            On the other hand, there is ongoing Jenkins Core release automation project, and right now I would suggest to not touch this area

             

            oleg_nenashev Oleg Nenashev added a comment - Hi. JENKINS-49905 is not completed from my PoV, I am not sure why it was closed without explanation. It is  NOT  about Remoting, it is about Jenkins core On the other hand, there is ongoing Jenkins Core release automation project, and right now I would suggest to not touch this area  
            oleg_nenashev Oleg Nenashev made changes -
            Link This issue is related to INFRA-910 [ INFRA-910 ]

            People

              lrossett Leonardo Rossetti
              oleg_nenashev Oleg Nenashev
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: