[vlc-commits] extras/package: added another script to sign the Delete Preferences script (close #7293)

[Felix Paul Kühne]

vlc/vlc-2.0 | branch: master | Felix Paul Kühne <fkuehne at videolan.org> | Mon Sep 17 13:54:09 2012 +0200| [e61eea31cb6c68dbd41103bdd6cfd2892d8d57dc] | committer: Felix Paul Kühne

extras/package: added another script to sign the Delete Preferences script (close #7293)
(cherry picked from commit 1e861aad8ed1fc551f9884a025376d80ecd7be9f)

> http://git.videolan.org/gitweb.cgi/vlc/vlc-2.0.git/?a=commit;h=e61eea31cb6c68dbd41103bdd6cfd2892d8d57dc
---

 extras/package/macosx/codesign-dp.sh |   87 ++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)

diff --git a/extras/package/macosx/codesign-dp.sh b/extras/package/macosx/codesign-dp.sh
new file mode 100755
index 0000000..41018fd
--- /dev/null
+++ b/extras/package/macosx/codesign-dp.sh
@@ -0,0 +1,87 @@
+#!/bin/sh
+# Copyright @ 2012 Felix Paul Kühne <fkuehne at videolan dot org>
+#
+# This program is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with this program; if not, write to the Free Software Foundation,
+# Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
+
+info()
+{
+    local green="\033[1;32m"
+    local normal="\033[0m"
+    echo "[${green}codesign${normal}] $1"
+}
+
+usage()
+{
+cat << EOF
+usage: $0 [options]
+
+Sign Delete_Preferences.app in the current checkout
+
+OPTIONS:
+   -h            Show this help
+   -i            Identity to use
+   -g            Enable additional magic
+EOF
+
+}
+
+while getopts "hi:g" OPTION
+do
+     case $OPTION in
+         h)
+             usage
+             exit 1
+         ;;
+         i)
+             IDENTITY=$OPTARG
+         ;;
+         g)
+             GK="yes"
+         ;;
+     esac
+done
+shift $(($OPTIND - 1))
+
+if [ "x$1" != "x" ]; then
+    usage
+    exit 1
+fi
+
+if test -z "$GK"
+then
+    info "Signing the executable"
+    codesign --force --sign "$IDENTITY" $OPTIONS extras/package/macosx/Delete_Preferences.app/Contents/MacOS/applet
+
+    info "Signing Resources"
+    find extras/package/macosx/Delete_Preferences.app/Contents/Resources/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
+else
+    REQUIREMENT="=designated => anchor apple generic  and identifier \"org.videolan.vlc\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists  and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
+
+    info "Signing the executable"
+    codesign --force --sign "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" extras/package/macosx/Delete_Preferences.app/Contents/MacOS/applet
+
+    info "Signing Resources"
+    find extras/package/macosx/Delete_Preferences.app/Contents/Resources/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \;
+fi
+
+info "all items signed, validating..."
+
+info "Validating binary"
+codesign --verify extras/package/macosx/Delete_Preferences.app/Contents/MacOS/applet
+
+info "Validating Resources"
+find extras/package/macosx/Delete_Preferences.app/Contents/Resources/* -type f -exec codesign --verify '{}' \;
+
+info "Validation complete"