From c73a99ef902b21cc0ed2b03daffa9f1adfb70412 Mon Sep 17 00:00:00 2001 From: Sergey Sharybin Date: Thu, 7 Nov 2019 16:50:31 +0100 Subject: Initial implementation of code signing routines This changes integrates code signing steps into a buildbot worker process. The configuration requires having a separate machine running with a shared folder access between the signing machine and worker machine. Actual signing is happening as a "POST-INSTALL" script run by CMake, which allows to sign any binary which ends up in the final bundle. Additionally, such way allows to avoid signing binaries in the build folder (if we were signing as a built process, which iwas another alternative). Such complexity is needed on platforms which are using CPack to generate final bundle: CPack runs INSTALL target into its own location, so it is useless to run signing on a folder which is considered INSTALL by the buildbot worker. There is a signing script which can be used as a standalone tool, making it possible to hook up signing for macOS's bundler. There is a dummy Linux signer implementation, which can be activated by returning True from mock_codesign in linux_code_signer.py. Main purpose of this signer is to give an ability to develop the scripts on Linux environment, without going to Windows VM. The code is based on D6036 from Nathan Letwory. Differential Revision: https://developer.blender.org/D6216 --- build_files/buildbot/codesign_server_windows.bat | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 build_files/buildbot/codesign_server_windows.bat (limited to 'build_files/buildbot/codesign_server_windows.bat') diff --git a/build_files/buildbot/codesign_server_windows.bat b/build_files/buildbot/codesign_server_windows.bat new file mode 100644 index 00000000000..82680f30eb4 --- /dev/null +++ b/build_files/buildbot/codesign_server_windows.bat @@ -0,0 +1,11 @@ +@echo off + +rem This is an entry point of the codesign server for Windows. +rem It makes sure that signtool.exe is within the current PATH and can be +rem used by the Python script. + +SETLOCAL + +set PATH=C:\Program Files (x86)\Windows Kits\10\App Certification Kit;%PATH% + +codesign_server_windows.py -- cgit v1.2.3