95aca44095
Rather than fetching a signature.tar.gz from somewhere on the net, instruct Gitian to use a signature from a tag in the bitcoin-detached-sigs repository which corresponds to the tag of the release being built. This changes detached-sig-apply.sh to take a dirname rather than a tarball as an argument, though detached-sig-create.sh still outputs a tarball for convenience. Github-Pull: #6269 Rebased-From: c110575a92ebe2e9a58b53d56aafa1f1ae37dbb2
48 lines
1.3 KiB
Bash
Executable File
48 lines
1.3 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
ROOTDIR=dist
|
|
BUNDLE="${ROOTDIR}/Bitcoin-Qt.app"
|
|
CODESIGN=codesign
|
|
TEMPDIR=sign.temp
|
|
TEMPLIST=${TEMPDIR}/signatures.txt
|
|
OUT=signature.tar.gz
|
|
OUTROOT=osx
|
|
|
|
if [ ! -n "$1" ]; then
|
|
echo "usage: $0 <codesign args>"
|
|
echo "example: $0 -s MyIdentity"
|
|
exit 1
|
|
fi
|
|
|
|
rm -rf ${TEMPDIR} ${TEMPLIST}
|
|
mkdir -p ${TEMPDIR}
|
|
|
|
${CODESIGN} -f --file-list ${TEMPLIST} "$@" "${BUNDLE}"
|
|
|
|
grep -v CodeResources < "${TEMPLIST}" | while read i; do
|
|
TARGETFILE="${BUNDLE}/`echo "${i}" | sed "s|.*${BUNDLE}/||"`"
|
|
SIZE=`pagestuff "$i" -p | tail -2 | grep size | sed 's/[^0-9]*//g'`
|
|
OFFSET=`pagestuff "$i" -p | tail -2 | grep offset | sed 's/[^0-9]*//g'`
|
|
SIGNFILE="${TEMPDIR}/${OUTROOT}/${TARGETFILE}.sign"
|
|
DIRNAME="`dirname "${SIGNFILE}"`"
|
|
mkdir -p "${DIRNAME}"
|
|
echo "Adding detached signature for: ${TARGETFILE}. Size: ${SIZE}. Offset: ${OFFSET}"
|
|
dd if="$i" of="${SIGNFILE}" bs=1 skip=${OFFSET} count=${SIZE} 2>/dev/null
|
|
done
|
|
|
|
grep CodeResources < "${TEMPLIST}" | while read i; do
|
|
TARGETFILE="${BUNDLE}/`echo "${i}" | sed "s|.*${BUNDLE}/||"`"
|
|
RESOURCE="${TEMPDIR}/${OUTROOT}/${TARGETFILE}"
|
|
DIRNAME="`dirname "${RESOURCE}"`"
|
|
mkdir -p "${DIRNAME}"
|
|
echo "Adding resource for: "${TARGETFILE}""
|
|
cp "${i}" "${RESOURCE}"
|
|
done
|
|
|
|
rm ${TEMPLIST}
|
|
|
|
tar -C "${TEMPDIR}" -czf "${OUT}" .
|
|
rm -rf "${TEMPDIR}"
|
|
echo "Created ${OUT}"
|