Up until now I have been the sole firmware developer and the keeper of the keys for our product.
Our scrappy little startup has expanded and is now bringing on additional staff including a new firmware dev.
For the obvious security purposes I have no intention of handing out the company's signing keys for generating packages for secure over the air updates.
I'd like to set up a signing server to handle Generating DFU packages. My first inclination is to set up a Jenkins server and minimally put together a Project which allows my new dev to upload the appropriate hex files, launch the job then retieve the signed package when done.
Has anyone set up a signing server, Jenkins or otherwise? Ideally, one of you will have a pointer to a Project definition doing exactly what I need,