Add a password to the Digicert signing certificate

[dduportal]

As per

release/utils/release.bash

Lines 79 to 81 in 7a03f98

	*.pfx)
	# pfx file download from azure key vault are not password protected, which is required for maven release plugin
	# so we need to add a new password

, the pfx file does not have a password.

However, this comment was made in 2020. We are 2023, and as per https://learn.microsoft.com/en-us/azure/key-vault/certificates/tutorial-import-certificate?tabs=azure-portal, password for pfxcertificate seems supported.

As an additional layer of security, we should be able to use a password (instead of converting pfx to pem for adding one).

Discovered while working on jenkins-infra/helpdesk#3323

[timja]

You might want to read the docs a bit closer ^.^

Once the certificate file is successfully imported, key vault will remove that password.

[dduportal]

🤦 correct, thanks for pointing it out 😅

Gotta close the issue then 👍