build: Sign mac installer

This commit is contained in:
Róbert Kiss
2018-02-24 23:12:01 +01:00
parent 2eaa1e0634
commit c3e712851c
5 changed files with 5 additions and 23 deletions

2
scripts/certs/.gitignore vendored Normal file
View File

@@ -0,0 +1,2 @@
windows-cert.p12
mac-cert.p12

Binary file not shown.

View File

@@ -83,8 +83,8 @@ if (process.platform === 'darwin') {
}
if (process.platform === 'darwin') {
// TODO: Remove comment when macOS certificates boughted and exported
//require('./setup-macos-keychain').registerKeyChain();
exec('openssl aes-256-cbc -K $CERT_KEY -iv $CERT_IV -in scripts/certs/mac-cert.p12.enc -out scripts/certs/mac-cert.p12 -d')
process.env.CSC_LINK = path.join(__dirname, 'certs/mac-cert.p12');
}
if (TEST_BUILD || gitTag) {

View File

@@ -1,20 +0,0 @@
'use strict'
const cp = require('child_process')
const path = require('path')
function registerKeyChain() {
const encryptedFile = path.join(__dirname, '../certs/developer-id-cert.p12.enc')
const decryptedFile = path.join(__dirname, '../certs/developer-id-cert.p12')
cp.execSync(`openssl aes-256-cbc -K $encrypted_04061b49eb95_key -iv $encrypted_04061b49eb95_iv -in ${encryptedFile} -out ${decryptedFile} -d`)
const keyChain = 'mac-build.keychain'
cp.execSync(`security create-keychain -p travis ${keyChain}`)
cp.execSync(`security default-keychain -s ${keyChain}`)
cp.execSync(`security unlock-keychain -p travis ${keyChain}`)
cp.execSync(`security set-keychain-settings -t 3600 -u ${keyChain}`)
cp.execSync(`security import ${decryptedFile} -k ${keyChain} -P $KEY_PASSWORD -T /usr/bin/codesign`)
}
module.exports.registerKeyChain = registerKeyChain