Sign appxbundle with certificate

[wekitecs]

In GitLab by @BenediktHensen on Feb 1, 2021, 10:26

At the moment, the appxbundle installer files are signed with a generic test certificate. It is only valid for one year after the compilation. This also means that the customers can only use the application for one year without updating to a newer version or asking us for a re-compile.

We should consider creating an own, longer-lasting certificate that we inject into the CI pipeline to sign the appxbundles with it.

[wekitecs]

In GitLab by @william.guest on Feb 3, 2021, 11:18

@BenediktHensen do you see this as part of sprint 5, or it comes later?

[wekitecs]

In GitLab by @BenediktHensen on Feb 3, 2021, 11:56

Yes, we should realize this quickly if we want to provide longer-lasting builds to customers.

[wekitecs]

In GitLab by @BenediktHensen on Apr 1, 2021, 16:13

The certificate can be written into the repository's secrets.
From there, they can be pulled into the CI runner for each run.