puppetlabs/puppet_for_the_win — pull request #31 by jeffmccune (2012-03-14 22:49:07+00:00)
Title: (#12620) Add windows:sign rake task to sign the MSI

This patch transforms this: (Windows 2003)

![Security Warning](http://dl.dropbox.com/u/17169007/img/Screen%20Shot%202012-02-10%20at%209.19.54%20AM.png)

Into this: (Windows 2008)

![User Account Control](http://dl.dropbox.com/u/17169007/img/Screen%20Shot%202012-03-14%20at%203.40.15%20PM.png)

Without this patch we have no automated rake tasks to digitally sign the
MSI packages we're building. This is a problem because we need to
easily sign the packages and each person who builds them shouldn't have
to learn the magic invocation if the `signtool` command.

This patch fixes the problem by adding a new rake task named
`windows:sign`. This task requires the `puppet.msi` and
`puppetenterprise.msi` packages to be built already and will digitally
sign them using the Puppet Labs code signing cert if it is installed on
the system running the task.

The README_DEVELOPER file is also updated with information about how to
install the code signing certificate on the build machine.