Bug 1037642

Summary: usbclerk binary should be signed by Red Hat code signing key
Product: Red Hat Enterprise Virtualization Manager Reporter: David Jaša <djasa>
Component: usb-clerk-winAssignee: Uri Lublin <uril>
Status: CLOSED WONTFIX QA Contact: SPICE QE bug list <spice-qe-bugs>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 3.3.0CC: dblechte, marcandre.lureau, rbalakri, uril, yeylon
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: spice
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-11-02 16:19:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Spice RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 923837    
Bug Blocks:    

Description David Jaša 2013-12-03 14:26:38 UTC
Description of problem:
usbclerk binary should be signed by Red Hat code signing key. It is currently unsigned.

Version-Release number of selected component (if applicable):
mingw-usbclerk-0.3.3-1.el6_5

How reproducible:
always

Steps to Reproduce:
1. launch usbclerk msi
2.
3.

Actual results:
when prompted by Windows if intallation should be launched, Windows (at least 7, 2008 R2) say that the binary is unsigned and the publisher is unknown

Expected results:
the binary is signed by code signing key so that the publisher is recognized as trusted source by Windows

Additional info:

Comment 1 Marc-Andre Lureau 2013-12-03 14:44:52 UTC
To be able to sign binaries inside the MSI, we'd need brew to be able to do cross-signing. Adding dependency on 923837

It would also make singing cross-build MSIs more easy.

Comment 2 David Blechter 2013-12-08 15:25:07 UTC
moving to 3.4, the 923837 should be solved first

Comment 3 Marc-Andre Lureau 2014-03-12 13:20:02 UTC
this is not going to happen in 3.4 if 923837 isn't fixed.

Comment 4 David Blechter 2014-06-02 17:48:40 UTC
pending depend on bug being fixed

Comment 5 Sandro Bonazzola 2015-10-26 12:29:03 UTC
this is an automated message. oVirt 3.6.0 RC3 has been released and GA is targeted to next week, Nov 4th 2015.
Please review this bug and if not a blocker, please postpone to a later release.
All bugs not postponed on GA release will be automatically re-targeted to

- 3.6.1 if severity >= high
- 4.0 if severity < high

Comment 6 Uri Lublin 2015-11-02 14:27:49 UTC
not a blocker

Comment 7 Uri Lublin 2015-11-02 16:19:52 UTC
Binaries can not be signed with current build system (pending upstream bug).
Since in 4.0 usbclerk is going to be obsolete,
Closing as WONTFIX