Git-Mirrors/onionshare
1
0
Fork 0
mirror of https://github.com/onionshare/onionshare.git synced 2025-02-17 13:02:42 -05:00
Code Issues Packages Projects Releases Wiki Activity

macOS package hardening (#967)

Browse Source 
When making a macOS release, add a timestamp to signature
This commit is contained in:
Micah Lee 2019-04-21 19:13:48 -07:00 committed by GitHub
parent cba7a47a85
commit f3f458da85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
install/build_osx.sh
View File

@ -27,11 +27,26 @@ if [ "$1" = "--release" ]; then
ENTITLEMENTS_PARENT_PATH="$ROOT/install/macos_sandbox/parent.plist"
echo "Codesigning the app bundle"
codesign --deep -s "$IDENTITY_NAME_APPLICATION" -f --entitlements "$ENTITLEMENTS_CHILD_PATH" "$APP_PATH"
codesign -s "$IDENTITY_NAME_APPLICATION" -f --entitlements "$ENTITLEMENTS_PARENT_PATH" "$APP_PATH"
codesign \
--deep \
-s "$IDENTITY_NAME_APPLICATION" \
--force \
--entitlements "$ENTITLEMENTS_CHILD_PATH" \
--timestamp \
"$APP_PATH"
codesign \
-s "$IDENTITY_NAME_APPLICATION" \
--force \
--entitlements "$ENTITLEMENTS_PARENT_PATH" \
--timestamp \
"$APP_PATH"
echo "Creating an installer"
productbuild --sign "$IDENTITY_NAME_INSTALLER" --component "$APP_PATH" /Applications "$PKG_PATH"
productbuild \
--sign "$IDENTITY_NAME_INSTALLER" \
--component "$APP_PATH" /Applications \
--timestamp \
"$PKG_PATH"
echo "Cleaning up"
rm -rf "$APP_PATH"