A public key was published recently for future macOS releases. Sadly,
that key was created the wrong way (iPhone OS instead of macOS), so
another had to be generated.
The new, working pubkey for Bitcoin Core releases starting with
0.16.0rc1 is included in the message below. That message is signed
On 2018-01-12 at 08:54:12 +, Peter Todd wrote:
While a clunky way to do it, you can use the `-signer` option to tell
OpenSSL to write the signer's certificate to a file. That certificate
can then be compared to the one from the repo, which was still in the
repo as of the (signed!) v0.15.1
On Fri, Jan 12, 2018 at 12:04:44AM -0500, Cory Fields via bitcoin-dev wrote:
> To verify, you can use something like:
> openssl smime -verify -in sig.pkcs7 -inform pem -ignore_critical -purpose any
>
> - "ignore_critical" setting tells openssl to ignore the Apple-specific
> critical extensions tha
Hi all
As discussed in a few of the last weekly meetings, Bitcoin Core's
macOS code signing certificate expired today.
We are (Greg is ;) in the process of establishing a new threshold
signing scheme that will allow us to handle code signing without any
single point of failure. But until then, re