2022-08-26 15:45:49 +02:00
|
|
|
#!/usr/bin/python3
|
2023-01-19 10:33:49 +01:00
|
|
|
# SPDX-License-Identifier: LicenseRef-EliasSteurerTachiom OR AGPL-3.0-only
|
2022-08-26 15:45:49 +02:00
|
|
|
from build import BuildConfig
|
|
|
|
|
from util import run
|
2022-11-02 12:15:34 +01:00
|
|
|
from sys import stdout
|
|
|
|
|
|
|
|
|
|
stdout.reconfigure(encoding='utf-8')
|
2022-08-26 15:45:49 +02:00
|
|
|
|
|
|
|
|
def sign(build_config: BuildConfig):
|
|
|
|
|
print("Run codedesign")
|
|
|
|
|
run("codesign --deep -f -s \"Developer ID Application: Elias Steurer (V887LHYKRH)\" --timestamp --options \"runtime\" -f --entitlements \"../../ScreenPlay/entitlements.plist\" --deep \"ScreenPlay.app/\"",
|
|
|
|
|
cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
print("Run codedesign verify")
|
|
|
|
|
run("codesign --verify --verbose=4 \"ScreenPlay.app/\"",
|
|
|
|
|
cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
# TODO: Replace with https://github.com/akeru-inc/xcnotary/issues/22#issuecomment-1179170957
|
|
|
|
|
# ditto -c -k --keepParent "ScreenPlay.app" "ScreenPlay.app.zip"
|
|
|
|
|
# Note the profile is the one name of the first step of (App Store Connect API) in the macOSSigning.md
|
|
|
|
|
# xcrun notarytool submit "ScreenPlay.app.zip" --keychain-profile "ScreenPlay" --wait
|
|
|
|
|
# xcrun stapler staple "ScreenPlay.app"
|
|
|
|
|
print("Packing .apps for upload")
|
|
|
|
|
run("ditto -c -k --keepParent 'ScreenPlay.app' 'ScreenPlay.app.zip'", cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
print("Run xcnotary submit")
|
|
|
|
|
run("xcrun notarytool submit ScreenPlay.app.zip --keychain-profile 'ScreenPlay' --wait", cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
print("Run stapler staple")
|
|
|
|
|
run("xcrun stapler staple ScreenPlay.app", cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
print("Run spctl assess")
|
|
|
|
|
run("spctl --assess --verbose \"ScreenPlay.app/\"", cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
print("Remove *.app.zip files.")
|
|
|
|
|
run("rm ScreenPlay.app.zip", cwd=build_config.bin_dir)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# We also need to sign the installer in osx:
|
|
|
|
|
if build_config.create_installer == "ON":
|
|
|
|
|
run("codesign --deep -f -s \"Developer ID Application: Elias Steurer (V887LHYKRH)\" --timestamp --options \"runtime\" -f --deep \"ScreenPlay-Installer.dmg/ScreenPlay-Installer.app/Contents/MacOS/ScreenPlay-Installer\"", cwd=build_config.build_folder)
|
|
|
|
|
run("codesign --verify --verbose=4 \"ScreenPlay-Installer.dmg/ScreenPlay-Installer.app/Contents/MacOS/ScreenPlay-Installer\"",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
run("xcnotary notarize ScreenPlay-Installer.dmg/ScreenPlay-Installer.app -d kelteseth@gmail.com -k ScreenPlay",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
run("spctl --assess --verbose \"ScreenPlay-Installer.dmg/ScreenPlay-Installer.app/\"",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
|
|
|
|
|
run("codesign --deep -f -s \"Developer ID Application: Elias Steurer (V887LHYKRH)\" --timestamp --options \"runtime\" -f --deep \"ScreenPlay-Installer.dmg/\"", cwd=build_config.build_folder)
|
|
|
|
|
run("codesign --verify --verbose=4 \"ScreenPlay-Installer.dmg/\"",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
run("xcnotary notarize ScreenPlay-Installer.dmg -d kelteseth@gmail.com -k ScreenPlay",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
run("spctl --assess --verbose \"ScreenPlay-Installer.dmg/\"",
|
|
|
|
|
cwd=build_config.build_folder)
|
|
|
|
|
|
