[java-identity-provider] branch main updated: Change comment about the provenance of the WIX signing cert

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=95dca3f02c7c3f0ddb0841e4780aa4406b17fb76

The following commit(s) were added to refs/heads/main by this push:
     new 95dca3f02 Change comment about the provenance of the WIX signing cert
95dca3f02 is described below

commit 95dca3f02c7c3f0ddb0841e4780aa4406b17fb76
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Tue Feb 18 13:45:05 2025 +0000

    Change comment about the provenance of the WIX signing cert
---
 idp-msi/src/main/wix/nuget.config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-msi/src/main/wix/nuget.config b/idp-msi/src/main/wix/nuget.config
index 0d2de2a5d..7caa2a123 100644
--- a/idp-msi/src/main/wix/nuget.config
+++ b/idp-msi/src/main/wix/nuget.config
@@ -4,7 +4,7 @@
     </config>
     <trustedSigners>
 	<author name="wixtoolset">
-	    <!-- The current status of this certificate is "trust on first use" -->
+	    <!-- We have established that the cert with this fingerprint is owned by people with check in rights to the wix github repo -->
 	    <certificate fingerprint="0DB368BC1A5A9E19CC9E036B490B7C4A4D3DFB941C0781B4F22F218BE0B54986" hashAlgorithm="SHA256" allowUntrustedRoot="false" />
 	</author>
     </trustedSigners>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.