Sign installer and uninstaller as well.

pull/486/head
Mooneer Salem 2023-07-27 00:41:36 -07:00
parent d6b26d01e0
commit fac4138bfa
2 changed files with 8 additions and 0 deletions

View File

@ -621,6 +621,12 @@ if(WIN32)
set(CPACK_PACKAGE_FILE_NAME "FreeDV-${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}.${CPACK_PACKAGE_VERSION_PATCH}-windows-${CMAKE_SYSTEM_PROCESSOR}") set(CPACK_PACKAGE_FILE_NAME "FreeDV-${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}.${CPACK_PACKAGE_VERSION_PATCH}-windows-${CMAKE_SYSTEM_PROCESSOR}")
endif (FREEDV_USING_LLVM_MINGW) endif (FREEDV_USING_LLVM_MINGW)
if(SIGN_WINDOWS_BINARIES)
# Add finalize command for NSIS so the installer/uninstaller can be
# signed too.
set(CPACK_NSIS_FINALIZE_CMD "mv %1 %1.tmp; ${OSSLSIGNCODE_BIN} sign -pkcs11engine ${PKCS11_ENGINE} -pkcs11module ${PKCS11_MODULE} -certs ${CERTIFICATE_FILE} -key \\\"${PKCS11_KEY}\\\" -in %1.tmp -out %1")
endif(SIGN_WINDOWS_BINARIES)
include(CPack) include(CPack)
elseif(UNIX AND NOT APPLE) elseif(UNIX AND NOT APPLE)
# Linux packaging # Linux packaging

View File

@ -173,10 +173,12 @@ endif(APPLE)
# Custom commands for signing Windows binaries # Custom commands for signing Windows binaries
if(SIGN_WINDOWS_BINARIES) if(SIGN_WINDOWS_BINARIES)
# Add custom command to sign freedv.exe.
add_custom_command( add_custom_command(
TARGET freedv TARGET freedv
POST_BUILD POST_BUILD
COMMAND mv $<TARGET_FILE:freedv> $<TARGET_FILE:freedv>.tmp COMMAND mv $<TARGET_FILE:freedv> $<TARGET_FILE:freedv>.tmp
COMMAND ${OSSLSIGNCODE_BIN} ARGS sign -pkcs11engine ${PKCS11_ENGINE} -pkcs11module ${PKCS11_MODULE} -certs ${CERTIFICATE_FILE} -key "${PKCS11_KEY}" -in $<TARGET_FILE:freedv>.tmp -out $<TARGET_FILE:freedv> COMMAND ${OSSLSIGNCODE_BIN} ARGS sign -pkcs11engine ${PKCS11_ENGINE} -pkcs11module ${PKCS11_MODULE} -certs ${CERTIFICATE_FILE} -key "${PKCS11_KEY}" -in $<TARGET_FILE:freedv>.tmp -out $<TARGET_FILE:freedv>
COMMAND rm $<TARGET_FILE:freedv>.tmp
VERBATIM) VERBATIM)
endif(SIGN_WINDOWS_BINARIES) endif(SIGN_WINDOWS_BINARIES)