summaryrefslogtreecommitdiff
path: root/solenv/bin/macosx-codesign-app-bundle
AgeCommit message (Collapse)Author
2016-03-04harden OS X code signing script (handle spaces in bundle name)Andras Timar
Change-Id: Icf9bdcd0bcd988d32477cf9ab7f8d917ff6a2275
2015-05-18OS X codesign fix (e.g. --disable-python case)Andras Timar
Change-Id: Icf6b2b9722481492a2d8d70af9dbb34b04a40df7 Reviewed-on: https://gerrit.libreoffice.org/15779 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2015-02-10Attempt at fixing Mac OS X code signingStephan Bergmann
...so that LibreOffice.app dmgs built with --enable-macosx-code-signing with an appstore-enabled identity will hopefully no longer be rejected on Mac OS X >= 10.9.5 as "'soffice' can't be opened because the identity of the developer cannot be confirmed." (Which I cannot verify for lack of an appstore-enabled certificate, though.) First of all, do not ignore errors from calls to codesign utitlity. Really. That reveals that soffice cannot be signed as soon as it is linked, as it requires all the other stuff in the app to be already signed. So just don't sign it after linking, it will be signed last step in macosx-codesign-app-bundle anyway. Second, --resource-rules exemptions are no longer allowed per <https://developer.apple.com/library/mac/technotes/tn2206/_index.html> "OS X Code Signing In Depth." Third, the handful of remaining shell scripts in MacOS/ need to be signed too. (Signing them adds extended attributes to the files.) Unfortunately, as discussed at <http://porkrind.org/missives/mac-os-x-codesigning-woes/> "Mac OS X codesigning woes," "hdiutil makehybrid" drops extended attributes from the generated dmg (so the dmg's LibreOffice.app would no longer be considered properly signed, as the shell scripts would no longer be signed). So switch from "hdiutil makehybrid" to "hdiutil create." Change-Id: I4b587f87d504666f7a1d0e3a24a8be76f22014c5
2014-09-10Bin incorrect commentTor Lillqvist
2014-08-15The --resource-rules option in being deprecatedTor Lillqvist
The documentation is a bit unclear yet, but I think it is safe to assume that Apple strongly wants sandboxed apps to have what we call ENABLE_MACOSX_MACLIKE_APP_STRUCTURE and to be signed without any special resource rules. Change-Id: I1409ccb6a3f9086d01af6ff318fe28536c1cebef
2014-06-09A few improvements to macosx-codesign-app-bundleTor Lillqvist
Try harder to handle app bundles with space in name. (Not sure if this version yet does that 100%.) Include the directory names in the "ids" to make them unique. There are lots of files with the same name (in different directories, of course), especially in an app bundle that includes help in multiple languages. Change-Id: I424c539f6389ac6f7c9cef96aeb873ddac459f78
2014-06-09Use essentially the same OS X code signing script as in libreoffice-4-2Tor Lillqvist
Change-Id: Ica7dcc823cc7027a00b15d2dcf5b73b0ef322189
2014-06-08Use MACOSX_APP_NAME (with dashes instead of spaces) instead of build-time nameTor Lillqvist
Change-Id: I01bf646635668429c68f53bd6ab543b7a8b0be2d
2014-04-04give an identifier to the app_bundle itselfNorbert Thiebaud
Language Pack did not seem to pick a decent default value for that Change-Id: I567f24882e16533e10d8ba91b777ad91dc507b87 Reviewed-on: https://gerrit.libreoffice.org/7485 Tested-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2013-11-05codesign: fix script to support spaces in the CODESIGN_IDENTITYNorbert Thiebaud
Change-Id: Ib30717518ff1d1291ba3a1fc7ba045e1fa29ad88 Reviewed-on: https://gerrit.libreoffice.org/6594 Reviewed-by: Norbert Thiebaud <nthiebaud@gmail.com> Tested-by: Norbert Thiebaud <nthiebaud@gmail.com>
2013-08-30ENABLE_MACOSX_SANDBOX Harmonize ENABLE_* variable to TRUE/<nothing>Norbert Thiebaud
Change-Id: Ice05796a9887c4ff311b78fcddd9820e0f06e7f1 Reviewed-on: https://gerrit.libreoffice.org/5708 Reviewed-by: Norbert Thiebaud <nthiebaud@gmail.com> Tested-by: Norbert Thiebaud <nthiebaud@gmail.com>
2013-08-27Factor out the app bundle code signing into a scriptTor Lillqvist
Call that script for make dev-install and when creating the .dmg. Change-Id: Ic468cafe04b2755f371d449fef0b84e2fdc7e197