You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
198 lines
7.6 KiB
198 lines
7.6 KiB
#!/bin/bash
|
|
# Copyright (C) 2012-2014 Felix Paul Kühne <fkuehne at videolan dot org>
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Lesser General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Lesser General Public License
|
|
# along with this program; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
|
|
|
|
set -e
|
|
|
|
info()
|
|
{
|
|
green='\x1B[1;32m'
|
|
normal='\x1B[0m'
|
|
echo -e "[${green}codesign${normal}] $1"
|
|
}
|
|
|
|
usage()
|
|
{
|
|
cat << EOF
|
|
usage: $0 [options]
|
|
|
|
Sign VLC.app in the current directory
|
|
|
|
OPTIONS:
|
|
-h Show this help
|
|
-i Identity to use
|
|
-t Entitlements file to use
|
|
-g Enable additional magic
|
|
EOF
|
|
|
|
}
|
|
|
|
while getopts "hi:t:g" OPTION
|
|
do
|
|
case $OPTION in
|
|
h)
|
|
usage
|
|
exit 1
|
|
;;
|
|
i)
|
|
IDENTITY=$OPTARG
|
|
;;
|
|
t)
|
|
OPTIONS="--entitlements $OPTARG"
|
|
;;
|
|
g)
|
|
GK="yes"
|
|
;;
|
|
esac
|
|
done
|
|
shift $(($OPTIND - 1))
|
|
|
|
if [ "x$1" != "x" ]; then
|
|
usage
|
|
exit 1
|
|
fi
|
|
|
|
if test -z "$GK"
|
|
then
|
|
|
|
info "Signing frameworks"
|
|
find VLC.app/Contents/Frameworks/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
|
|
|
|
info "Signing the executable"
|
|
codesign --force -s "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC
|
|
|
|
info "Signing the modules"
|
|
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
|
|
|
|
info "Signing the libraries"
|
|
find VLC.app/Contents/MacOS/lib/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
|
|
|
|
info "Signing the lua stuff"
|
|
find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
|
|
else
|
|
FIRSTPARTOF_REQUIREMENT="=designated => anchor apple generic and identifier \""
|
|
SECONDPARTOF_REQUIREMENT="\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
|
|
|
|
info "Cleaning frameworks"
|
|
find VLC.app/Contents/Frameworks -type f -name ".DS_Store" -exec rm '{}' \;
|
|
find VLC.app/Contents/Frameworks -type f -name "*.textile" -exec rm '{}' \;
|
|
find VLC.app/Contents/Frameworks -type f -name "*.txt" -exec rm '{}' \;
|
|
|
|
info "Signing frameworks"
|
|
IDENTIFIER="com.binarymethod.BGHUDAppKit"
|
|
codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/BGHUDAppKit.framework/Versions/A
|
|
IDENTIFIER="com.growl.growlframework"
|
|
codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Growl.framework/Versions/A
|
|
IDENTIFIER="org.andymatuschak.sparkle.Autoupdate"
|
|
codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Sparkle.framework/Resources/Autoupdate.app
|
|
IDENTIFIER="org.andymatuschak.Sparkle"
|
|
codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A
|
|
|
|
info "Signing the framework headers"
|
|
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.h" -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the framework strings"
|
|
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.strings" -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the framework plist files"
|
|
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.plist" -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the framework nib files"
|
|
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.nib" -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the headers"
|
|
for i in `find VLC.app/Contents/MacOS/include/* -type f -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the modules"
|
|
|
|
for i in `find VLC.app/Contents/MacOS/plugins/* -type f -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the libraries"
|
|
|
|
for i in `find VLC.app/Contents/MacOS/lib/* -type f -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing share"
|
|
|
|
for i in `find VLC.app/Contents/MacOS/share/* -type f -exec echo {} \;`
|
|
do
|
|
fbname=$(basename "$i")
|
|
filename="${fbname%.*}"
|
|
|
|
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
|
|
done
|
|
|
|
info "Signing the executable"
|
|
IDENTIFIER="org.videolan.vlc"
|
|
codesign --force -s "$IDENTITY" --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/MacOS/VLC
|
|
fi
|
|
|
|
info "all items signed, validating..."
|
|
|
|
info "Validating frameworks"
|
|
codesign --verify -vv VLC.app/Contents/Frameworks/BGHUDAppKit.framework
|
|
codesign --verify -vv VLC.app/Contents/Frameworks/Growl.framework
|
|
codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework
|
|
|
|
info "Validating autoupdate app"
|
|
codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework/Versions/Current/Resources/Autoupdate.app
|
|
|
|
info "Validating complete bundle"
|
|
codesign --verify --deep --verbose=4 VLC.app
|
|
|
|
|
|
info "Validation complete"
|
|
|