build: Sign mac installer
This commit is contained in:
2
scripts/certs/.gitignore
vendored
Normal file
2
scripts/certs/.gitignore
vendored
Normal file
@@ -0,0 +1,2 @@
|
||||
windows-cert.p12
|
||||
mac-cert.p12
|
||||
BIN
scripts/certs/mac-cert.p12.enc
Normal file
BIN
scripts/certs/mac-cert.p12.enc
Normal file
Binary file not shown.
@@ -83,8 +83,8 @@ if (process.platform === 'darwin') {
|
||||
}
|
||||
|
||||
if (process.platform === 'darwin') {
|
||||
// TODO: Remove comment when macOS certificates boughted and exported
|
||||
//require('./setup-macos-keychain').registerKeyChain();
|
||||
exec('openssl aes-256-cbc -K $CERT_KEY -iv $CERT_IV -in scripts/certs/mac-cert.p12.enc -out scripts/certs/mac-cert.p12 -d')
|
||||
process.env.CSC_LINK = path.join(__dirname, 'certs/mac-cert.p12');
|
||||
}
|
||||
|
||||
if (TEST_BUILD || gitTag) {
|
||||
|
||||
@@ -1,20 +0,0 @@
|
||||
'use strict'
|
||||
|
||||
const cp = require('child_process')
|
||||
const path = require('path')
|
||||
|
||||
function registerKeyChain() {
|
||||
const encryptedFile = path.join(__dirname, '../certs/developer-id-cert.p12.enc')
|
||||
const decryptedFile = path.join(__dirname, '../certs/developer-id-cert.p12')
|
||||
cp.execSync(`openssl aes-256-cbc -K $encrypted_04061b49eb95_key -iv $encrypted_04061b49eb95_iv -in ${encryptedFile} -out ${decryptedFile} -d`)
|
||||
|
||||
const keyChain = 'mac-build.keychain'
|
||||
cp.execSync(`security create-keychain -p travis ${keyChain}`)
|
||||
cp.execSync(`security default-keychain -s ${keyChain}`)
|
||||
cp.execSync(`security unlock-keychain -p travis ${keyChain}`)
|
||||
cp.execSync(`security set-keychain-settings -t 3600 -u ${keyChain}`)
|
||||
|
||||
cp.execSync(`security import ${decryptedFile} -k ${keyChain} -P $KEY_PASSWORD -T /usr/bin/codesign`)
|
||||
}
|
||||
|
||||
module.exports.registerKeyChain = registerKeyChain
|
||||
Reference in New Issue
Block a user