security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-03-11 22:52:47 +01:00
Code Activity

speedo: Sign the windows installer with a timestamp.

Browse Source 
--
This commit is contained in:
Werner Koch 2018-10-25 18:26:34 +02:00
parent 2b57a8159c
commit 11e9b704b5
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
build-aux/speedo.mk
View File

@ -157,8 +157,9 @@ INST_NAME=gnupg-w32
# Use this to override the installaion directory for native builds. # Use this to override the installaion directory for native builds.
INSTALL_PREFIX=none INSTALL_PREFIX=none
# The Authenticode key used to sign the Windows installer # The Authenticode key and cert chain used to sign the Windows installer
AUTHENTICODE_KEY=${HOME}/.gnupg/g10code-authenticode-key.p12 AUTHENTICODE_KEY=${HOME}/.gnupg/g10code-authenticode-key.p12
AUTHENTICODE_CERTS=${HOME}/.gnupg/g10code-authenticode-certs.pem
# Directory names. # Directory names.
@ -1266,8 +1267,11 @@ sign-installer:
echo "speedo: * Signing installer" ;\ echo "speedo: * Signing installer" ;\
echo "speedo: * Key: $(AUTHENTICODE_KEY)";\ echo "speedo: * Key: $(AUTHENTICODE_KEY)";\
echo "speedo: */" ;\ echo "speedo: */" ;\
osslsigncode sign -pkcs12 $(AUTHENTICODE_KEY) -askpass \ osslsigncode sign -certs $(AUTHENTICODE_CERTS)\
-h sha256 -in "PLAY/inst/$$exefile" -out "../../$$exefile" ;\ -pkcs12 $(AUTHENTICODE_KEY) -askpass \
-ts "http://timestamp.globalsign.com/scripts/timstamp.dll" \
-h sha256 -n GnuPG -i https://gnupg.org \
-in "PLAY/inst/$$exefile" -out "../../$$exefile" ;\
exefile="../../$$exefile" ;\ exefile="../../$$exefile" ;\
$(call MKSWDB_commands,$${exefile},$${reldate}); \ $(call MKSWDB_commands,$${exefile},$${reldate}); \
echo "speedo: /*" ;\ echo "speedo: /*" ;\