Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add File.is_signed, small bulk signing fixes #540

Merged
merged 1 commit into from May 4, 2015

Conversation

magopian
Copy link
Contributor

@magopian magopian commented May 4, 2015

No description provided.

@@ -80,6 +80,8 @@ class File(amo.models.OnChangeMixin, amo.models.ModelBase):
binary_components = models.BooleanField(default=False, db_index=True)
# Serial number of the certificate use for the signature.
cert_serial_num = models.CharField(max_length=255, blank=True)
# Is the file signed by Mozilla?
is_signed = models.BooleanField(default=False)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can there be multiple files per version and some of those not signed? If not, I'm curious why not put this on the Version model since that's where the version field is and it has the .1-signed in it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The .1-signed hackery is only to distinguish (and bump) versions that have been manually signed: we'll only be using that for the roll-out of the signing feature. We won't use it anymore afterwards.

Regarding the multiple files per versions and some of those not signed: yes, this is possible in at least two different cases:
1/ you create a new version for the linux platform, and put it through review. It gets reviewed, and thus the file for linux is signed. You can now add another file (to the same version) for the mac platform, which isn't signed until it'll be reviewed
2/ when a version with multiple files is reviewed, each individual file is signed in turn. If something happens with the signature of a file, it'll raise an exception and stop the process (and thus not sign the remaining files).

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

馃憤

@robhudson
Copy link
Member

r+wc

@jasonthomas
Copy link
Member

I could split the migration in two (first adding a nullable field, and then setting its default value and removing the nullable) if needed, what do you think @jasonthomas ?

I don't think we need to split out the migration.

magopian added a commit that referenced this pull request May 4, 2015
Add File.is_signed, small bulk signing fixes
@magopian magopian merged commit 75c8700 into mozilla:master May 4, 2015
@magopian magopian deleted the add-file-is_signed branch May 4, 2015 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants