videolan
/
vlc
mirror of https://gitea.goldendeliverer.com/videolan/vlc.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

extras/macosx: update codesign script for GateKeeper v2 needed to support future OS X releases

pull/24/head
Felix Paul Kühne 12 years ago
parent
5e1c1945e7
commit
367a9a4764
1 changed files with 123 additions and 15 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 136
      extras/package/macosx/codesign.sh

136
extras/package/macosx/codesign.sh
View File

@ -1,5 +1,5 @@
#!/bin/sh #!/bin/bash
# Copyright @ 2012 Felix Paul Kühne <fkuehne at videolan dot org> # Copyright (C) 2012-2014 Felix Paul Kühne <fkuehne at videolan dot org>
# #
# This program is free software; you can redistribute it and/or modify it # This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by # under the terms of the GNU Lesser General Public License as published by
@ -17,9 +17,9 @@
info() info()
{ {
local green="\033[1;32m" green='\x1B[1;32m'
local normal="\033[0m" normal='\x1B[0m'
echo "[${green}codesign${normal}] $1" echo -e "[${green}codesign${normal}] $1"
} }
usage() usage()
@ -65,8 +65,12 @@ fi
if test -z "$GK" if test -z "$GK"
then then
info "Signing frameworks"
find VLC.app/Contents/Frameworks/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
info "Signing the executable" info "Signing the executable"
codesign --force --sign "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC codesign --force -s "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC
info "Signing the modules" info "Signing the modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \; find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
@ -77,25 +81,129 @@ then
info "Signing the lua stuff" info "Signing the lua stuff"
find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \; find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
else else
REQUIREMENT="=designated => anchor apple generic and identifier \"org.videolan.vlc\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))" IDENTIFIER="com.binarymethod.BGHUDAppKit"
info "Signing the executable" FIRSTPARTOF_REQUIREMENT="=designated => anchor apple generic and identifier \""
codesign --force --sign "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" VLC.app/Contents/MacOS/VLC SECONDPARTOF_REQUIREMENT="\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
info "Cleaning frameworks"
find VLC.app/Contents/Frameworks -type f -name ".DS_Store" -exec rm '{}' \;
find VLC.app/Contents/Frameworks -type f -name "*.textile" -exec rm '{}' \;
find VLC.app/Contents/Frameworks -type f -name "*.txt" -exec rm '{}' \;
info "Signing frameworks"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/BGHUDAppKit.framework/Versions/A
IDENTIFIER="com.growl.growlframework"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Growl.framework/Versions/A
IDENTIFIER="org.andymatuschak.Sparkle"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A
info "Signing the framework headers"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.h" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework strings"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.strings" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework plist files"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.plist" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework nib files"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.nib" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the Sparkle updater tool"
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "PkgInfo" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "Autoupdate" -exec echo {} \;`
do
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "*.icns" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the headers"
for i in `find VLC.app/Contents/MacOS/include/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the modules" info "Signing the modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \;
for i in `find VLC.app/Contents/MacOS/plugins/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the libraries" info "Signing the libraries"
find VLC.app/Contents/MacOS/lib/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \;
info "Signing the lua stuff" for i in `find VLC.app/Contents/MacOS/lib/* -type f -exec echo {} \;`
find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \; do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing share"
for i in `find VLC.app/Contents/MacOS/share/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the executable"
codesign --force -s "$IDENTITY" --requirements "$FIRSTPARTOF_REQUIREMENTorg.videolan.vlc$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/MacOS/VLC
fi fi
info "all items signed, validating..." info "all items signed, validating..."
info "Validating binary" info "Validating binary"
codesign --verify VLC.app/Contents/MacOS/VLC codesign --verify --verbose=4 VLC.app/Contents/MacOS/VLC
info "Validating frameworks"
find VLC.app/Contents/Frameworks/* -type f -exec codesign --verify '{}' \;
info "Validating modules" info "Validating modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --verify '{}' \; find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --verify '{}' \;

Write Preview
Loading…
Cancel
Save