Skip to content

Test MacOSX signing staging service with Theia

We would like to deploy an improved version of the MacOSX signing service to production as it has various improvements over the status quo:

  • able to run in the OpenShift cluster instead of dedicated MacOSX machines
  • able to deep sign a zip archive instead of having to do it manually by extracting all binaries from the archive and signing them individually and reconstructing the archive afterwards

The service is available at https://cbi-staging.eclipse.org/macos/codesign/sign so you just have to replace the hostname as the production service is available at https://cbi.eclipse.org/macos/codesign/sign.

The service has been tested for several months and now also has undergone some validation from another project, see #5417.

The same signing certificate as for the production service is being used.

As I know that theia uses the macosx signing for their releases, would it be possible that you test the staging service for any regressions? This would also allow you to simplify your signing process afaict.

Please let me know if you need any help.

Edited by Thomas Neidhart