3125cfceec
Works similarly to Windows configuration where buildbot worker and codesign machines are communicating with each other using network drive.
75 lines
2.6 KiB
Python
Executable File
75 lines
2.6 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
# ##### BEGIN GPL LICENSE BLOCK #####
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License
|
|
# as published by the Free Software Foundation; either version 2
|
|
# of the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software Foundation,
|
|
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
#
|
|
# ##### END GPL LICENSE BLOCK #####
|
|
|
|
# Helper script which takes care of signing provided location.
|
|
#
|
|
# The location can either be a directory (in which case all eligible binaries
|
|
# will be signed) or a single file (in which case a single file will be signed).
|
|
#
|
|
# This script takes care of all the complexity of communicating between process
|
|
# which requests file to be signed and the code signing server.
|
|
#
|
|
# NOTE: Signing happens in-place.
|
|
|
|
import argparse
|
|
import sys
|
|
|
|
from pathlib import Path
|
|
|
|
from codesign.simple_code_signer import SimpleCodeSigner
|
|
|
|
|
|
def create_argument_parser():
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument('path_to_sign', type=Path)
|
|
return parser
|
|
|
|
|
|
def main():
|
|
parser = create_argument_parser()
|
|
args = parser.parse_args()
|
|
path_to_sign = args.path_to_sign.absolute()
|
|
|
|
if sys.platform == 'win32':
|
|
# When WIX packed is used to generate .msi on Windows the CPack will
|
|
# install two different projects and install them to different
|
|
# installation prefix:
|
|
#
|
|
# - C:\b\build\_CPack_Packages\WIX\Blender
|
|
# - C:\b\build\_CPack_Packages\WIX\Unspecified
|
|
#
|
|
# Annoying part is: CMake's post-install script will only be run
|
|
# once, with the install prefix which corresponds to a project which
|
|
# was installed last. But we want to sign binaries from all projects.
|
|
# So in order to do so we detect that we are running for a CPack's
|
|
# project used for WIX and force parent directory (which includes both
|
|
# projects) to be signed.
|
|
#
|
|
# Here we force both projects to be signed.
|
|
if path_to_sign.name == 'Unspecified' and 'WIX' in str(path_to_sign):
|
|
path_to_sign = path_to_sign.parent
|
|
|
|
code_signer = SimpleCodeSigner()
|
|
code_signer.sign_file_or_directory(path_to_sign)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|