diff --git a/deploy/build_windows.bat b/deploy/build_windows.bat index 9d938f5e..8ee3e74f 100644 --- a/deploy/build_windows.bat +++ b/deploy/build_windows.bat @@ -44,6 +44,12 @@ echo "PRO_FILE_PATH: %PRO_FILE_PATH%" echo "QMAKE_STASH_FILE: %QMAKE_STASH_FILE%" echo "TARGET_FILENAME: %TARGET_FILENAME%" +rem Signing staff +powershell Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope LocalMachine +powershell Get-ExecutionPolicy -List + +powershell Import-PfxCertificate -FilePath %SCRIPT_DIR:"=%\PrivacyTechWindowsCert.pfx -CertStoreLocation Cert:\LocalMachine\My -Password $(ConvertTo-SecureString -String $Env:WIN_CERT_PW -AsPlainText -Force) + echo "Cleanup..." Rmdir /Q /S %RELEASE_DIR% Del %QMAKE_STASH_FILE% @@ -59,7 +65,6 @@ cd %PROJECT_DIR% cd %WORK_DIR% set CL=/MP nmake /A /NOLOGO -break nmake clean rem if not exist "%OUT_APP_DIR:"=%\%APP_FILENAME:"=%" break @@ -70,11 +75,11 @@ copy "%WORK_DIR:"=%\platform\post-uninstall\release\post-uninstall.exe" %OUT_APP echo "Signing exe" cd %OUT_APP_DIR% -signtool sign /f "%SCRIPT_DIR:"=%\PrivacyTechWindowsCert.pfx" /p %WIN_CERT_PW% /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 *.exe +signtool sign /v /sm /s My /n "Privacy Technologies OU" /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 *.exe "%QT_BIN_DIR:"=%\windeployqt" --release --force --no-translations "%OUT_APP_DIR:"=%\%APP_FILENAME:"=%" -signtool sign /f "%SCRIPT_DIR:"=%\PrivacyTechWindowsCert.pfx" /p %WIN_CERT_PW% /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 *.dll +signtool sign /v /sm /s My /n "Privacy Technologies OU" /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 *.dll echo "Copying deploy data..." xcopy %DEPLOY_DATA_DIR% %OUT_APP_DIR% /s /e /y /i /f @@ -96,7 +101,7 @@ echo "Creating installer..." "%QIF_BIN_DIR:"=%\binarycreator" --offline-only -v -c config\windows.xml -p packages -f %TARGET_FILENAME% cd %PROJECT_DIR% -signtool sign /f "%SCRIPT_DIR:"=%\PrivacyTechWindowsCert.pfx" /p %WIN_CERT_PW% /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 %TARGET_FILENAME% +signtool sign /v /sm /s My /n "Privacy Technologies OU" /fd sha256 /tr http://timestamp.comodoca.com/?td=sha256 /td sha256 %TARGET_FILENAME% echo "Finished, see %TARGET_FILENAME%" exit 0 \ No newline at end of file