Browse Source
fixes #6128 some of this is based on:mastere1354632d2/scripts/package/macos-notarize-app.sh1eb8b71e7d24e44e97845abec73eee
SomberNight
5 years ago
5 changed files with 175 additions and 71 deletions
@ -1,23 +0,0 @@ |
|||
#!/usr/bin/env bash |
|||
|
|||
. $(dirname "$0")/../build_tools_util.sh |
|||
|
|||
|
|||
function DoCodeSignMaybe { # ARGS: infoName fileOrDirName codesignIdentity |
|||
infoName="$1" |
|||
file="$2" |
|||
identity="$3" |
|||
deep="" |
|||
if [ -z "$identity" ]; then |
|||
# we are ok with them not passing anything; master script calls us unconditionally even if no identity is specified |
|||
return |
|||
fi |
|||
if [ -d "$file" ]; then |
|||
deep="--deep" |
|||
fi |
|||
if [ -z "$infoName" ] || [ -z "$file" ] || [ -z "$identity" ] || [ ! -e "$file" ]; then |
|||
fail "Argument error to internal function DoCodeSignMaybe()" |
|||
fi |
|||
info "Code signing ${infoName}..." |
|||
codesign -f -v $deep -s "$identity" "$file" || fail "Could not code sign ${infoName}" |
|||
} |
|||
@ -0,0 +1,19 @@ |
|||
<?xml version="1.0" encoding="UTF-8"?> |
|||
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
|||
<plist version="1.0"> |
|||
<dict> |
|||
<!-- These are required for binaries built by PyInstaller --> |
|||
<!-- see pyinstaller/pyinstaller#4629 --> |
|||
<key>com.apple.security.cs.allow-unsigned-executable-memory</key> |
|||
<true/> |
|||
<key>com.apple.security.cs.disable-library-validation</key> |
|||
<true/> |
|||
|
|||
<!-- These are required for USB HID access (hw wallets). --> |
|||
<!-- see https://github.com/Electron-Cash/Electron-Cash/commit/5abec73eee0cdeb725e3c5a989621ec4ccfb92a0 --> |
|||
<key>com.apple.security.cs.allow-dyld-environment-variables</key> |
|||
<true/> |
|||
<key>com.apple.security.cs.allow-jit</key> |
|||
<true/> |
|||
</dict> |
|||
</plist> |
|||
@ -0,0 +1,77 @@ |
|||
#!/usr/bin/env bash |
|||
# from https://github.com/metabrainz/picard/blob/e1354632d2db305b7a7624282701d34d73afa225/scripts/package/macos-notarize-app.sh |
|||
|
|||
|
|||
if [ -z "$1" ]; then |
|||
echo "Specify app bundle as first parameter" |
|||
exit 1 |
|||
fi |
|||
|
|||
if [ -z "$APPLE_ID_USER" ] || [ -z "$APPLE_ID_PASSWORD" ]; then |
|||
echo "You need to set your Apple ID credentials with \$APPLE_ID_USER and \$APPLE_ID_PASSWORD." |
|||
exit 1 |
|||
fi |
|||
|
|||
APP_BUNDLE=$(basename "$1") |
|||
APP_BUNDLE_DIR=$(dirname "$1") |
|||
|
|||
cd "$APP_BUNDLE_DIR" || exit 1 |
|||
|
|||
# Package app for submission |
|||
echo "Generating ZIP archive ${APP_BUNDLE}.zip..." |
|||
ditto -c -k --rsrc --keepParent "$APP_BUNDLE" "${APP_BUNDLE}.zip" |
|||
|
|||
# Submit for notarization |
|||
echo "Submitting $APP_BUNDLE for notarization..." |
|||
RESULT=$(xcrun altool --notarize-app --type osx \ |
|||
--file "${APP_BUNDLE}.zip" \ |
|||
--primary-bundle-id org.electrum.electrum \ |
|||
--username $APPLE_ID_USER \ |
|||
--password @env:APPLE_ID_PASSWORD \ |
|||
--output-format xml) |
|||
|
|||
if [ $? -ne 0 ]; then |
|||
echo "Submitting $APP_BUNDLE failed:" |
|||
echo "$RESULT" |
|||
exit 1 |
|||
fi |
|||
|
|||
REQUEST_UUID=$(echo "$RESULT" | xpath \ |
|||
"//key[normalize-space(text()) = 'RequestUUID']/following-sibling::string[1]/text()" 2> /dev/null) |
|||
|
|||
if [ -z "$REQUEST_UUID" ]; then |
|||
echo "Submitting $APP_BUNDLE failed:" |
|||
echo "$RESULT" |
|||
exit 1 |
|||
fi |
|||
|
|||
echo "$(echo "$RESULT" | xpath \ |
|||
"//key[normalize-space(text()) = 'success-message']/following-sibling::string[1]/text()" 2> /dev/null)" |
|||
|
|||
# Poll for notarization status |
|||
echo "Submitted notarization request $REQUEST_UUID, waiting for response..." |
|||
sleep 60 |
|||
while : |
|||
do |
|||
RESULT=$(xcrun altool --notarization-info "$REQUEST_UUID" \ |
|||
--username "$APPLE_ID_USER" \ |
|||
--password @env:APPLE_ID_PASSWORD \ |
|||
--output-format xml) |
|||
STATUS=$(echo "$RESULT" | xpath \ |
|||
"//key[normalize-space(text()) = 'Status']/following-sibling::string[1]/text()" 2> /dev/null) |
|||
|
|||
if [ "$STATUS" = "success" ]; then |
|||
echo "Notarization of $APP_BUNDLE succeeded!" |
|||
break |
|||
elif [ "$STATUS" = "in progress" ]; then |
|||
echo "Notarization in progress..." |
|||
sleep 20 |
|||
else |
|||
echo "Notarization of $APP_BUNDLE failed:" |
|||
echo "$RESULT" |
|||
exit 1 |
|||
fi |
|||
done |
|||
|
|||
# Staple the notary ticket |
|||
xcrun stapler staple "$APP_BUNDLE" |
|||
Loading…
Reference in new issue