Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add minimum RSA key size of Code Signing private key to documentation #1443

Open
PaperMonster opened this issue Jul 21, 2023 · 0 comments
Open

Comments

@PaperMonster
Copy link

PaperMonster commented Jul 21, 2023

I found out that AppCenter CLI 2.13.0 and later cannot release updates signed with private key of length lower than 2048 bit. I encountered this problem after upgrading CLI to the latest version with my 512-bit key I created few years ago when 512 was the default value. This was due to a breaking change in jsonwebtoken v9 that rejects RSA keys shorter than 2048 bit.

Even though the default key size is now 2048 when being generated, it might save someone's time in the future to mention the minimum key size in the documentation. (Since the CLI simply returned exit code 3 and debug mode vaguely said "The specified signing key file was not valid", so considerable amount of time spent in investigation)


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants