[Python-checkins] Skip signing side-loadable MSIX for Windows (GH-30644)

zooba webhook-mailer at python.org
Mon Jan 17 13:05:28 EST 2022


https://github.com/python/cpython/commit/d6c6e6ba739ee714e5706144853008f1eed446ba
commit: d6c6e6ba739ee714e5706144853008f1eed446ba
branch: main
author: Steve Dower <steve.dower at python.org>
committer: zooba <steve.dower at microsoft.com>
date: 2022-01-17T18:05:16Z
summary:

Skip signing side-loadable MSIX for Windows (GH-30644)

We currently do not release these files, and so there's nothing lost by signing them.
Our code signing certificate is somehow incompatible with signing MSIX files. We may be able to re-enable this when we next renew, or if Microsoft updates their signing tool to work with our certificate.

files:
M .azure-pipelines/windows-release/stage-pack-msix.yml

diff --git a/.azure-pipelines/windows-release/stage-pack-msix.yml b/.azure-pipelines/windows-release/stage-pack-msix.yml
index f967cfdbe326f..6f3e7a5e5d593 100644
--- a/.azure-pipelines/windows-release/stage-pack-msix.yml
+++ b/.azure-pipelines/windows-release/stage-pack-msix.yml
@@ -96,7 +96,9 @@ jobs:
   displayName: Sign side-loadable MSIX bundles
   dependsOn:
   - Pack_MSIX
-  condition: and(succeeded(), variables['SigningCertificate'])
+  # Our current certificate does not support MSIX signing, so we unconditionally skip this step
+  #condition: and(succeeded(), variables['SigningCertificate'])
+  condition: false
 
   pool:
     name: 'Windows Release'



More information about the Python-checkins mailing list