Re: [bitcoin-dev] New Bitcoin Core macOS signing key

2018-01-31 Thread Cory Fields via bitcoin-dev
A public key was published recently for future macOS releases. Sadly, that key was created the wrong way (iPhone OS instead of macOS), so another had to be generated. The new, working pubkey for Bitcoin Core releases starting with 0.16.0rc1 is included in the message below. That message is signed

Re: [bitcoin-dev] New Bitcoin Core macOS signing key

2018-01-12 Thread nullius via bitcoin-dev
On 2018-01-12 at 08:54:12 +, Peter Todd wrote: While a clunky way to do it, you can use the `-signer` option to tell OpenSSL to write the signer's certificate to a file. That certificate can then be compared to the one from the repo, which was still in the repo as of the (signed!) v0.15.1

Re: [bitcoin-dev] New Bitcoin Core macOS signing key

2018-01-12 Thread Peter Todd via bitcoin-dev
On Fri, Jan 12, 2018 at 12:04:44AM -0500, Cory Fields via bitcoin-dev wrote: > To verify, you can use something like: > openssl smime -verify -in sig.pkcs7 -inform pem -ignore_critical -purpose any > > - "ignore_critical" setting tells openssl to ignore the Apple-specific > critical extensions tha

[bitcoin-dev] New Bitcoin Core macOS signing key

2018-01-11 Thread Cory Fields via bitcoin-dev
Hi all As discussed in a few of the last weekly meetings, Bitcoin Core's macOS code signing certificate expired today. We are (Greg is ;) in the process of establishing a new threshold signing scheme that will allow us to handle code signing without any single point of failure. But until then, re