Add sign_verify.sh

1 files changed, 23 insertions, 0 deletions

diff --git a/admin/osx/sparkle/sign_verify.sh b/admin/osx/sparkle/sign_verify.sh
new file mode 100755
index 000000000..56fb870a1
--- /dev/null
+++ b/admin/osx/sparkle/sign_verify.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+# Inspired by https://github.com/sparkle-project/Sparkle/issues/896#issuecomment-339904848
+
+if [ "${#}" -ne 3 ]; then
+  echo "$(basename ${0}):"
+  echo
+  echo "  This script can be used to verify the .tbz.sig file in releases during manual testing"
+  echo "  It does the same verification as Sparkle but is itself *not* used by Sparkle."
+  echo
+  echo "  Usage: ${0} public_key_path update_archive_path base64_signature_content"
+  echo
+  exit 1
+fi
+
+set -euxo pipefail
+
+# Make sure we are using system openssl and not one from brew
+openssl() {
+  /usr/bin/openssl "${@}"
+}
+
+openssl dgst -sha1 -binary < "${2}" | openssl dgst -sha1 -verify "${1}" -signature <(echo "${3}" | openssl enc -base64 -d)