bitcoin/contrib/macdeploy/detached-sig-create.sh

#!/bin/sh
# Copyright (c) 2014-2019 The Bitcoin Core developers
# Distributed under the MIT software license, see the accompanying
# file COPYING or http://www.opensource.org/licenses/mit-license.php.

export LC_ALL=C
set -e

ROOTDIR=dist
BUNDLE="${ROOTDIR}/Bitcoin-Qt.app"
SIGNAPPLE=signapple
TEMPDIR=sign.temp
OUT=signature-osx.tar.gz
OUTROOT=osx/dist

if [ -z "$1" ]; then
  echo "usage: $0 <signapple args>"
  echo "example: $0 <path to key>"
  exit 1
fi

rm -rf ${TEMPDIR}
mkdir -p ${TEMPDIR}

${SIGNAPPLE} sign -f --detach "${TEMPDIR}/${OUTROOT}"  "$@" "${BUNDLE}"

tar -C "${TEMPDIR}" -czf "${OUT}" .
rm -rf "${TEMPDIR}"
echo "Created ${OUT}"
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`#!/bin/sh`
scripted-diff: Bump copyright of files changed in 2019 -BEGIN VERIFY SCRIPT- ./contrib/devtools/copyright_header.py update ./ -END VERIFY SCRIPT- 2019-12-30 06:39:22 -03:00			`# Copyright (c) 2014-2019 The Bitcoin Core developers`
[copyright] add MIT license headers to .sh scripts where missing Years are set according to 'git log' history 2016-09-11 16:36:22 -03:00			`# Distributed under the MIT software license, see the accompanying`
			`# file COPYING or http://www.opensource.org/licenses/mit-license.php.`

Add "export LC_ALL=C" to all shell scripts 2018-06-13 10:50:48 -04:00			`export LC_ALL=C`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`set -e`

			`ROOTDIR=dist`
[OSX] revert renaming of Bitcoin-Qt.app 2015-06-01 10:42:34 -03:00			`BUNDLE="${ROOTDIR}/Bitcoin-Qt.app"`
gitian: use signapple to create the MacOS code signature 2021-01-07 15:50:22 -03:00			`SIGNAPPLE=signapple`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`TEMPDIR=sign.temp`
release: create a bundle for the new signing script Also change the mac filename to match The procedure remains the same, but now there's a nifty script to automate the signing process. Future steps: - Build osslsigncode in the gitian-win descriptor so that the signer itself is deterministic. - Verify in the gitian-win-signer descriptor that the expected cert chain was used. 2017-01-10 17:22:34 -03:00			`OUT=signature-osx.tar.gz`
gitian: use signapple to create the MacOS code signature 2021-01-07 15:50:22 -03:00			`OUTROOT=osx/dist`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00
Enable ShellCheck rules Enabled ShellCheck rules: SC1087 SC2001 SC2004 SC2005 SC2006 SC2016 SC2028 SC2048 SC2066 (note that IFS already contains only a line feed) SC2116 SC2166 SC2181 SC2206 SC2207 SC2230 SC2236 2019-07-02 12:48:08 -04:00			`if [ -z "$1" ]; then`
gitian: use signapple to create the MacOS code signature 2021-01-07 15:50:22 -03:00			`echo "usage: $0 <signapple args>"`
			`echo "example: $0 <path to key>"`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`exit 1`
			`fi`

gitian: use signapple to create the MacOS code signature 2021-01-07 15:50:22 -03:00			`rm -rf ${TEMPDIR}`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`mkdir -p ${TEMPDIR}`

gitian: use signapple to create the MacOS code signature 2021-01-07 15:50:22 -03:00			`${SIGNAPPLE} sign -f --detach "${TEMPDIR}/${OUTROOT}" "$@" "${BUNDLE}"`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00
build: Cope with spaces in filenames when creating/applying OSX sigs 2015-05-15 18:54:20 -03:00			`tar -C "${TEMPDIR}" -czf "${OUT}" .`
			`rm -rf "${TEMPDIR}"`
build: add a deterministic dmg signer 2014-11-21 21:26:45 -03:00			`echo "Created ${OUT}"`