<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 22:46:22 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[COMPASS-7386] Migrate to the New Signing Service</title>
                <link>https://jira.mongodb.org/browse/COMPASS-7386</link>
                <project id="13182" key="COMPASS">Compass </project>
                    <description>&lt;blockquote&gt;&lt;p&gt;We&#8217;ve recently completed migrating MongoDB&#8217;s internal signing platform to a new vendor, Garasign. Up until now teams have been using an internally-built signing solution just called &#8220;Notary Service&#8221;. The Notary Service was convenient for a lot of things, but as new security requirements have come up and technology has moved on (Notary was written in Python 2!), we decided to move to a Hardware Security Module (HSM)-backed platform that integrates with native signing tools like Windows Signtool, JSign, and Osslsigncode (Windows Portable Executables or MSIs) or GPG (RPMs, detached PGP signatures, Git tags). As a note, the MacOS Notary Service will continue to be a separate offering unrelated to this migration.&lt;/p&gt;

&lt;p&gt;For your projects, this means that we&#8217;re asking teams to migrate from the current custom tooling to the new, more general tooling which can transparently sign artifacts via the cloud HSM. As a tentative, soft deadline, we&#8217;d like to consider turning off access to the old Notary Service by early FY24 Q4. If you don&#8217;t believe this is enough time for your project to migrate, please reach out to us in #devprod-release-tools and we can look into what accommodations we need to make on a case-by-case basis.&lt;/p&gt;

&lt;p&gt;We currently provide container images which contain the necessary binaries for signing in order to more tightly control dependencies, but we are open to discussion on alternative setups if this cannot meet your needs. We have created a &lt;a href=&quot;https://wiki.corp.mongodb.com/display/DBDEVPROD/Artifact+signing+with+Garasign&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;comprehensive wiki page describing how to use the new tooling&lt;/a&gt;, and can answer any questions or assist in debugging as needed. Additionally, all Server release branches have already been migrated as &lt;a href=&quot;https://github.com/mongodb/mongo/blob/c8261f6d1d780bb69cb979967390ff3b746b5742/etc/evergreen_yml_components/definitions.yml#L7306-L7326&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;an example you can use&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;Please feel free to reach out over email or in #devprod-release-tools with any questions, comments or concerns!&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;We see the legacy notary service being used in places like &lt;a href=&quot;https://github.com/mongodb-js/compass/blob/dee79541f8ceacc82322c4ce2ee204bd5c5f149d/packages/notary-service-client/lib/index.js#L2&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb-js/compass/blob/dee79541f8ceacc82322c4ce2ee204bd5c5f149d/packages/notary-service-client/lib/index.js#L2&lt;/a&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="2486628">COMPASS-7386</key>
            <summary>Migrate to the New Signing Service</summary>
                <type id="3" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14718&amp;avatarType=issuetype">Task</type>
                                            <priority id="4" iconUrl="https://jira.mongodb.org/images/icons/priorities/minor.svg">Minor - P4</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="3">Duplicate</resolution>
                                        <assignee username="-1">Unassigned</assignee>
                                    <reporter username="zakhar.kleyman@mongodb.com">Zakhar Kleyman</reporter>
                        <labels>
                    </labels>
                <created>Tue, 31 Oct 2023 15:34:27 +0000</created>
                <updated>Wed, 17 Jan 2024 12:41:28 +0000</updated>
                            <resolved>Wed, 17 Jan 2024 12:41:28 +0000</resolved>
                                                    <fixVersion>No version</fixVersion>
                                        <due></due>
                            <votes>0</votes>
                                    <watches>1</watches>
                                                                                                                <comments>
                            <comment id="6017008" author="JIRAUSER1262678" created="Wed, 17 Jan 2024 12:41:28 +0000"  >&lt;p&gt;Closing this as duplicate of other tickets in this epic.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 17 Jan 2024 12:41:28 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        3 weeks ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10257" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Documentation Changes</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="11861"><![CDATA[Not Needed]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                    <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>COMPASS-7052</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>basit.chonka@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            3 weeks ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>basit.chonka@mongodb.com</customfieldvalue>
            <customfieldvalue>zakhar.kleyman@mongodb.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|i2y5ov:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hr195t:1</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="8018">Iteration Scutellosaurus</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|i2xru7:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>