[PATCH 1 of 4] (issue116) Sign binaries with test certificate if RELESE_BUILD option is not used
Wald Commits
scm-commit at wald.intevation.org
Wed Sep 10 17:54:54 CEST 2014
# HG changeset patch
# User Andre Heinecke <andre.heinecke at intevation.de>
# Date 1410364331 -7200
# Node ID fc4e1fe4e4d4c939f06b6851b231b14068ec54eb
# Parent f110a3f6e387b5cc111d4277ae42603431bacbb0
(issue116) Sign binaries with test certificate if RELESE_BUILD option is not used
diff -r f110a3f6e387 -r fc4e1fe4e4d4 CMakeLists.txt
--- a/CMakeLists.txt Wed Sep 10 16:41:36 2014 +0200
+++ b/CMakeLists.txt Wed Sep 10 17:52:11 2014 +0200
@@ -38,6 +38,12 @@
find_package(Qt5Widgets)
+find_program(OSSLSIGNCODE_EXECUTABLE osslsigncode)
+
+if (WIN32 AND NOT OSSLSIGNCODE_EXECUTABLE)
+ message (STATUS "WARNING: osslsigncode not found. Code verification and code verification tests will fail.")
+endif()
+
if (NOT WIN32)
find_package(NSS)
else ()
diff -r f110a3f6e387 -r fc4e1fe4e4d4 cinst/CMakeLists.txt
--- a/cinst/CMakeLists.txt Wed Sep 10 16:41:36 2014 +0200
+++ b/cinst/CMakeLists.txt Wed Sep 10 17:52:11 2014 +0200
@@ -36,6 +36,17 @@
POST_BUILD
COMMAND ${CMAKE_STRIP} cinst.exe
)
+ if (NOT RELEASE_BUILD)
+ add_custom_command(
+ TARGET cinst
+ POST_BUILD
+ COMMAND ${OSSLSIGNCODE_EXECUTABLE} sign -certs ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.pem
+ -key ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.key
+ -h sha256 -in ${CMAKE_CURRENT_BINARY_DIR}/cinst.exe
+ -out ${CMAKE_CURRENT_BINARY_DIR}/cinst-signed.exe &&
+ mv ${CMAKE_CURRENT_BINARY_DIR}/cinst-signed.exe ${CMAKE_CURRENT_BINARY_DIR}/cinst.exe
+ )
+ endif()
else()
add_custom_command(
TARGET cinst
@@ -68,6 +79,17 @@
POST_BUILD
COMMAND ${CMAKE_STRIP} mozilla.exe
)
+ if (NOT RELEASE_BUILD)
+ add_custom_command(
+ TARGET mozilla
+ POST_BUILD
+ COMMAND ${OSSLSIGNCODE_EXECUTABLE} sign -certs ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.pem
+ -key ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.key
+ -h sha256 -in ${CMAKE_CURRENT_BINARY_DIR}/mozilla.exe
+ -out ${CMAKE_CURRENT_BINARY_DIR}/mozilla-signed.exe &&
+ mv ${CMAKE_CURRENT_BINARY_DIR}/mozilla-signed.exe ${CMAKE_CURRENT_BINARY_DIR}/mozilla.exe
+ )
+ endif()
else()
add_custom_command(
TARGET mozilla
diff -r f110a3f6e387 -r fc4e1fe4e4d4 ui/CMakeLists.txt
--- a/ui/CMakeLists.txt Wed Sep 10 16:41:36 2014 +0200
+++ b/ui/CMakeLists.txt Wed Sep 10 17:52:11 2014 +0200
@@ -236,6 +236,27 @@
POST_BUILD
COMMAND ${CMAKE_STRIP} trustbridge-admin.exe
)
+ if (NOT RELEASE_BUILD)
+ message("Status will sign.")
+ add_custom_command(
+ TARGET trustbridge
+ POST_BUILD
+ COMMAND ${OSSLSIGNCODE_EXECUTABLE} sign -certs ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.pem
+ -key ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.key
+ -h sha256 -in ${CMAKE_CURRENT_BINARY_DIR}/trustbridge.exe
+ -out ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-signed.exe &&
+ mv ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-signed.exe ${CMAKE_CURRENT_BINARY_DIR}/trustbridge.exe
+ )
+ add_custom_command(
+ TARGET trustbridge-admin
+ POST_BUILD
+ COMMAND ${OSSLSIGNCODE_EXECUTABLE} sign -certs ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.pem
+ -key ${CMAKE_SOURCE_DIR}/ui/tests/data/codesign/codesigning.key
+ -h sha256 -in ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-admin.exe
+ -out ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-admin-signed.exe &&
+ mv ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-admin-signed.exe ${CMAKE_CURRENT_BINARY_DIR}/trustbridge-admin.exe
+ )
+ endif()
else()
add_custom_command(
TARGET trustbridge
diff -r f110a3f6e387 -r fc4e1fe4e4d4 ui/tests/CMakeLists.txt
--- a/ui/tests/CMakeLists.txt Wed Sep 10 16:41:36 2014 +0200
+++ b/ui/tests/CMakeLists.txt Wed Sep 10 17:52:11 2014 +0200
@@ -15,7 +15,6 @@
find_package(Qt5Test)
include_directories(${Qt5Test_INCLUDE_DIRS})
find_program(HIAWATHA_EXECUTABLE hiawatha)
-find_program(OSSLSIGNCODE_EXECUTABLE osslsigncode)
find_program(OPENSSL_EXECUTABLE openssl)
if (NOT HIAWATHA_EXECUTABLE)
@@ -24,10 +23,6 @@
add_definitions(-DHIAWATHA_EXECUTABLE="${HIAWATHA_EXECUTABLE}")
endif()
-if (WIN32 AND NOT OSSLSIGNCODE_EXECUTABLE)
- message (STATUS "WARNING: osslsigncode not found. Authenticode tests will not be run.")
-endif()
-
if (UNIX AND NOT OPENSSL_EXECUTABLE)
message (STATUS "WARNING: openssl (the tool) not found. Binary verification tests will not be run.")
endif()
More information about the Trustbridge-commits
mailing list