Skip to content

V
vlc
Commit 367a9a47 authored by Felix Paul Kühne's avatar Felix Paul Kühne
Browse files
Options

extras/macosx: update codesign script for GateKeeper v2 needed to support future OS X releases

parent 5e1c1945
Hide whitespace changes
Inline Side-by-side
Showing with 123 additions and 15 deletions
extras/package/macosx/codesign.sh
View file @ 367a9a47
#!/bin/sh #!/bin/bash
# Copyright @ 2012 Felix Paul Kühne <fkuehne at videolan dot org> # Copyright (C) 2012-2014 Felix Paul Kühne <fkuehne at videolan dot org>
# #
# This program is free software; you can redistribute it and/or modify it # This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by # under the terms of the GNU Lesser General Public License as published by
...@@ -17,9 +17,9 @@ ...@@ -17,9 +17,9 @@
info() info()
{ {
local green="\033[1;32m" green='\x1B[1;32m'
local normal="\033[0m" normal='\x1B[0m'
echo "[${green}codesign${normal}] $1" echo -e "[${green}codesign${normal}] $1"
} }
usage() usage()
...@@ -65,8 +65,12 @@ fi ...@@ -65,8 +65,12 @@ fi
if test -z "$GK" if test -z "$GK"
then then
info "Signing frameworks"
find VLC.app/Contents/Frameworks/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
info "Signing the executable" info "Signing the executable"
codesign --force --sign "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC codesign --force -s "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC
info "Signing the modules" info "Signing the modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \; find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
...@@ -77,25 +81,129 @@ then ...@@ -77,25 +81,129 @@ then
info "Signing the lua stuff" info "Signing the lua stuff"
find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \; find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
else else
REQUIREMENT="=designated => anchor apple generic and identifier \"org.videolan.vlc\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))" IDENTIFIER="com.binarymethod.BGHUDAppKit"
info "Signing the executable" FIRSTPARTOF_REQUIREMENT="=designated => anchor apple generic and identifier \""
codesign --force --sign "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" VLC.app/Contents/MacOS/VLC SECONDPARTOF_REQUIREMENT="\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
info "Cleaning frameworks"
find VLC.app/Contents/Frameworks -type f -name ".DS_Store" -exec rm '{}' \;
find VLC.app/Contents/Frameworks -type f -name "*.textile" -exec rm '{}' \;
find VLC.app/Contents/Frameworks -type f -name "*.txt" -exec rm '{}' \;
info "Signing frameworks"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/BGHUDAppKit.framework/Versions/A
IDENTIFIER="com.growl.growlframework"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Growl.framework/Versions/A
IDENTIFIER="org.andymatuschak.Sparkle"
codesign --force --deep --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A
info "Signing the framework headers"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.h" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework strings"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.strings" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework plist files"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.plist" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the framework nib files"
for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.nib" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the Sparkle updater tool"
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "PkgInfo" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "Autoupdate" -exec echo {} \;`
do
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
for i in `find VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources -type f -name "*.icns" -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the headers"
for i in `find VLC.app/Contents/MacOS/include/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the modules" info "Signing the modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \;
for i in `find VLC.app/Contents/MacOS/plugins/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the libraries" info "Signing the libraries"
find VLC.app/Contents/MacOS/lib/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \;
info "Signing the lua stuff" for i in `find VLC.app/Contents/MacOS/lib/* -type f -exec echo {} \;`
find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS --requirements "$REQUIREMENT" '{}' \; do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing share"
for i in `find VLC.app/Contents/MacOS/share/* -type f -exec echo {} \;`
do
fbname=$(basename "$i")
filename="${fbname%.*}"
codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements,resource-rules --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" $i
done
info "Signing the executable"
codesign --force -s "$IDENTITY" --requirements "$FIRSTPARTOF_REQUIREMENTorg.videolan.vlc$SECONDPARTOF_REQUIREMENT" VLC.app/Contents/MacOS/VLC
fi fi
info "all items signed, validating..." info "all items signed, validating..."
info "Validating binary" info "Validating binary"
codesign --verify VLC.app/Contents/MacOS/VLC codesign --verify --verbose=4 VLC.app/Contents/MacOS/VLC
info "Validating frameworks"
find VLC.app/Contents/Frameworks/* -type f -exec codesign --verify '{}' \;
info "Validating modules" info "Validating modules"
find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --verify '{}' \; find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --verify '{}' \;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment