AZEN-SGG/amnezia-client
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add DeveloperID certificate and improve macOS signing script

Browse source 
Use keychain option for codesign and restore login keychain to list
after signing
This commit is contained in:
Yaroslav Yashin 2025-06-20 18:01:03 +03:00
parent fd510da613
commit 2a0d8df76e
2 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
deploy/DeveloperIDG2CA.cer Normal file
View file

Binary file not shown.

13
deploy/build_macos.sh Executable file → Normal file
View file

@ -17,7 +17,7 @@ DEPLOY_DIR=$PROJECT_DIR/deploy
mkdir -p "$DEPLOY_DIR/build" mkdir -p "$DEPLOY_DIR/build"
BUILD_DIR="$DEPLOY_DIR/build" BUILD_DIR="$DEPLOY_DIR/build"
echo "Project dir: ${PROJECT_DIR}" echo "Project dir: ${PROJECT_DIR}"
echo "Build dir: ${BUILD_DIR}" echo "Build dir: ${BUILD_DIR}"
APP_NAME=AmneziaVPN APP_NAME=AmneziaVPN
@ -83,7 +83,7 @@ cp "$DEPLOY_DATA_DIR/$PLIST_NAME" "$BUNDLE_DIR/Contents/Resources/$PLIST_NAME"
security find-identity -p codesigning || true security find-identity -p codesigning || true
echo "Signing App bundle..." echo "Signing App bundle..."
/usr/bin/codesign --deep --force --verbose --timestamp -o runtime --sign "$MAC_SIGNER_ID" "$BUNDLE_DIR" /usr/bin/codesign --deep --force --verbose --timestamp -o runtime --keychain "$KEYCHAIN_PATH" --sign "$MAC_SIGNER_ID" "$BUNDLE_DIR"
/usr/bin/codesign --verify -vvvv "$BUNDLE_DIR" || true /usr/bin/codesign --verify -vvvv "$BUNDLE_DIR" || true
spctl -a -vvvv "$BUNDLE_DIR" || true spctl -a -vvvv "$BUNDLE_DIR" || true
@ -213,4 +213,13 @@ if [ "${MAC_CERT_PW+x}" ]; then
spctl -a -vvvv "$FINAL_PKG" || true spctl -a -vvvv "$FINAL_PKG" || true
fi fi
# Sign app bundle
/usr/bin/codesign --deep --force --verbose --timestamp -o runtime --keychain "$KEYCHAIN_PATH" --sign "$MAC_SIGNER_ID" "$BUNDLE_DIR"
spctl -a -vvvv "$BUNDLE_DIR" || true
# Add login keychain back to list and set as default
KEYCHAIN="$HOME/Library/Keychains/login.keychain-db"
security list-keychains -d user -s "$KEYCHAIN" "$KEYCHAIN_PATH" "$(security list-keychains -d user | tr '\n' ' ')"
security list-keychains -d user -s "$KEYCHAIN"
echo "Finished, artifact is $FINAL_PKG" echo "Finished, artifact is $FINAL_PKG"