summaryrefslogtreecommitdiff
path: root/postprocess/signing
AgeCommit message (Collapse)Author
2019-09-06split msi signing from creation to reduce number of singtool callsChristian Lohmaier
as with private key on crypto-smartcard you'd have to enter your pin over a hundred times while creating full-lang builds and that is not fun. This reduces it to * once for dll/exe (at least in case for mergelib is is less than 350 objects and that doesn't break commandline limits - previously it was set to only sign 20 objects at a time, forcing a pin-entry over 15 times) and * once for main installation set * once for SDK * once for all the helppacks (signing description previously also contained the language, this change drops that to just "<productname> <version> Helppack" and last three are not scattered timewise, but are done after all packaging is complete, so the build only waits twice for user-input. Change-Id: Ibb8bb233e967556f9654573ad30d0ed5883b533f Reviewed-on: https://gerrit.libreoffice.org/78649 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2018-04-25Install UCRT from MSUs, not using nested VC Redist installMike Kaganski
Using nested install is bad because (1) MS advises against it (though it most possibly doesn't relate to our specific case, when we install the vc redist exe package in UI part, so actually only a single MSI session is active at any time); (2) because it adds some extra interactions (user sees something "unrelated" being installed, which raises concerns; additional admin authentication required); and (3) because it runs in InstallUISequence, thus only installing the UCRT when doing interactive installation (unattended installs, including GPO, need to install UCRT separately). This patch aims to incorporate the original UCRT MSU (Windows Update) packages (https://support.microsoft.com/en-us/help/2999226) available as a zip archive from https://www.microsoft.com/en-us/download/details.aspx?id=48234 - the same as used in VC redists for VS 2015 and 2017. This obsoletes the separate installation of the redist; since we also have the redist as merge module in our MSI, that is enough (and removes redundancy). The MSUs are installed using wusa.exe in a custom action (deferred, non-impersonating). As a small bonus, embedding MSUs instead of redist EXE allows us to shrink the size of installer a little (~10 MB). As deferred custom actions cannot access current installer database, we workaround this by using initial immediate impersonating action to extract the binaries into a temporary location. To ensure that the file gets removed upon completion (both successful and failed), we use an additional cleanup action. Commit 61b1d631331551b43bc7d619be33bfbfeff7cad6 is effectively reverted. Change-Id: I1529356fdcc67ff24b232c01ddf8bb3a31bb00bd Reviewed-on: https://gerrit.libreoffice.org/52923 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Mike Kaganski <mike.kaganski@collabora.com>
2018-02-08Don't re-sign vc_redist packagesMike Kaganski
Change-Id: I62f55463c04f9bab1dd37f80fe6e15e0296d10bf Reviewed-on: https://gerrit.libreoffice.org/49388 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Mike Kaganski <mike.kaganski@collabora.com>
2017-02-10Remove MinGW supportStephan Bergmann
In OOo times, there'd originally been efforts to allow building on Windows with MinGW. Later, in LO times, this has been shifted to an attempt of cross- compiling for Windows on Linux. That attempt can be considered abandoned, and the relevant code rotting. Due to this heritage, there are now three kinds of MinGW-specific code in LO: * Code from the original OOo native Windows effort that is no longer relevant for the LO cross-compilation effort, but has never been removed properly. * Code from the original OOo native Windows effort that is re-purposed for the LO cross-compilation effort. * Code that has been added specifially for the LO cross-compilation effort. All three kinds of code are removed. (An unrelated, remaining use of MinGW is for --enable-build-unowinreg, utilizing --with-mingw-cross-compiler, MINGWCXX, and MINGWSTRIP.) Change-Id: I49daad8669b4cbe49fa923050c4a4a6ff7dda568 Reviewed-on: https://gerrit.libreoffice.org/34127 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2015-09-12Typo: muliple->multipleJulien Nabet
Change-Id: Iebcf44d99bd4cabd5f7f1242e44c1c1d8e5a10d5
2014-02-19use 'ne' for string comparisonAndras Timar
Change-Id: I0d059933786119c3c26202c7b48d793404e5a0eb
2013-09-08break the habit of throwing away the actually useful error messagesChristian Lohmaier
The lines that help dignose a problem is almost never the first one that just states "there was an error". The explanation of the error follows in the next lines. So don't quit immediately after the first error-line, but wait what the command has to tell and log/print the whole info. Change-Id: I2a4b3470b4b66ed37fa5e5a34d452c548d24b965 Reviewed-on: https://gerrit.libreoffice.org/5861 Reviewed-by: Thomas Arnhold <thomas@arnhold.org> Reviewed-by: Thorsten Behrens <tbehrens@suse.com> Tested-by: Thorsten Behrens <tbehrens@suse.com>
2013-07-03Fix Windows signing and timestampingFridrich Štrba
Change-Id: Ife8774c9a6157e8bb943d1ba8ec32f560c8281c4
2012-12-15postprocess: convert to gbuildMatúš Kukan
Change-Id: I6c81fa0f1b8d7273541d5d9883b5fc96a5091bbd Reviewed-on: https://gerrit.libreoffice.org/1080 Reviewed-by: Fridrich Strba <fridrich@documentfoundation.org> Tested-by: Fridrich Strba <fridrich@documentfoundation.org>
2012-12-07We definitely want a log file to check in case something goes wrongFridrich Štrba
Change-Id: Ie8ab243e72decae63717cf78d8e7038a74b4c1ae
2012-12-07Make the usage notice correspond to realityFridrich Štrba
Change-Id: I4142af0181629c627e1137ce406249040f28e51f
2012-12-07Add --enable-windows-build-signing optionFridrich Štrba
Change-Id: I9630a486043c97aa9e31873c63f807cedb869a24
2012-12-07Allow signing of dlls and exes with default certificate without passwordFridrich Štrba
Change-Id: Ic39276df49cb317936baf7956dd74a1a7f42cbff
2012-11-12Don't bundle gdiplus.dll any moreTor Lillqvist
It was needed for Windows 2000 support. Change-Id: I1c0bec3fd3c76005b843d62c636410201abfa8e1
2012-06-28remove malingering legacy RCS tags.Michael Meeks
2012-06-21re-base on ALv2 code.Michael Meeks
Change-Id: Ice06e639213aeb6f7f23cbf4634947dd25613db1
2011-09-30clean-up ghost traces of unicowNorbert Thiebaud
2010-02-12changefileheader2: #i109125#: change source file copyright notice from Sun ↵Jens-Heiner Rechtien
Microsystems to Oracle; remove CVS style keywords (RCSfile, Revision)
2008-12-08CWS-TOOLING: integrate CWS rt35Rüdiger Timm
2008-12-02 08:25:35 +0100 rt r264658 : Do not print useless outdated version info. checkdeliver: store errors to file to ease later analysis. 2008-12-01 17:40:03 +0100 rt r264622 : #i96749# Only copy when file exists 2008-12-01 15:28:07 +0100 rt r264610 : #i96749# Avoid collisions when creating zip archive of files delivered into common tree. 2008-11-28 13:20:52 +0100 rt r264545 : #i90846# Old 'cmake' makefile, must be obsolete since ages. 2008-11-28 13:18:12 +0100 rt r264544 : #i90846# Remove old StarDivision copyright notices.
2008-06-25INTEGRATION: CWS jl104 (1.2.28); FILE MERGEDKurt Zenker
2008/06/20 06:16:25 jl 1.2.28.1: #i88078# changing cli_types.dll for cli_oootypes.dll and cli_uretyepes.dll
2008-04-10INTEGRATION: CWS changefileheader (1.2.16); FILE MERGEDRüdiger Timm
2008/03/31 16:05:03 rt 1.2.16.1: #i87441# Change license header to LPGL v3.
2007-08-20INTEGRATION: CWS obo14 (1.1.2); FILE ADDEDIvo Hinkelmann
2007/07/25 11:32:03 rt 1.1.2.3: Minor beautifications. 2007/07/25 10:41:10 obo 1.1.2.2: minor fixes 2007/07/11 09:10:17 obo 1.1.2.1: #i79312# Signing support for Windows Vista
2007-08-20INTEGRATION: CWS obo14 (1.1.2); FILE ADDEDIvo Hinkelmann
2007/07/11 09:20:56 obo 1.1.2.1: #i79312# Signing support for Windows Vista
2007-08-20INTEGRATION: CWS obo14 (1.1.2); FILE ADDEDIvo Hinkelmann
2007/07/25 10:09:30 rt 1.1.2.2: Quoting needed. 2007/07/11 09:20:10 obo 1.1.2.1: #i79312# Signing support for Windows Vista
generated by cgit (git 2.34.1) at 2024-12-28 05:32:03 +0000