This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Quickest Path to a Signing Server?

Up until now I have been the sole firmware developer and the keeper of the keys for our product.

Our scrappy little startup has expanded and is now bringing on additional staff including a new firmware dev.

For the obvious security purposes I have no intention of handing out the company's signing keys for generating packages for secure over the air updates.

I'd like to set up a signing server to handle Generating DFU packages. My first inclination is to set up a Jenkins server and minimally put together a Project which allows my new dev to upload the appropriate hex files, launch the job then retieve the signed package when done.

Has anyone set up a signing server, Jenkins or otherwise? Ideally, one of you will have a pointer to a Project definition doing exactly what I need,

Related