nextcloud-desktop/admin/osx/sign_app.sh
2019-02-05 09:48:30 +01:00

21 lines
783 B
Bash
Executable File

#!/bin/sh -xe
[ "$#" -lt 2 ] && echo "Usage: sign_app.sh <app> <identity> <team_identifier>" && exit
src_app="$1"
identity="$2"
team_identifier="$3"
codesign -s "$identity" --force --preserve-metadata=entitlements --verbose=4 --options runtime --deep "$src_app/Contents/Frameworks/Sparkle.framework/Versions/A/Resources/Autoupdate.app"
codesign -s "$identity" --force --preserve-metadata=entitlements --verbose=4 --options runtime --deep "$src_app"
# Verify the signature
codesign -dv $src_app
codesign --verify -v --strict $src_app
spctl -a -t exec -vv $src_app
# Validate that the key used for signing the binary matches the expected TeamIdentifier
# needed to pass the SocketApi through the sandbox
codesign -dv $src_app 2>&1 | grep "TeamIdentifier=$team_identifier"
exit $?