fix(macos): signing

This commit is contained in:
Baptiste Augrain
2022-09-12 12:14:30 +02:00
parent 53cb71df89
commit 6567a25215
2 changed files with 16 additions and 6 deletions

View File

@@ -23,22 +23,24 @@ if [[ "${OS_NAME}" == "osx" ]]; then
DEFAULT_KEYCHAIN="$(security default-keychain | sed -E 's|^.*/([^/]+)\-db"$|\1|')"
echo "${CERTIFICATE_OSX_P12}" | base64 --decode > "${CERTIFICATE_P12}"
security default-keychain
security create-keychain -p mysecretpassword "${CODIUM_KEYCHAIN}"
security default-keychain -s "${CODIUM_KEYCHAIN}"
# security default-keychain -s "${CODIUM_KEYCHAIN}"
security unlock-keychain -p mysecretpassword "${CODIUM_KEYCHAIN}"
echo "import"
security import "${CERTIFICATE_P12}" -k "${CODIUM_KEYCHAIN}" -P "${CERTIFICATE_OSX_PASSWORD}" -T /usr/bin/codesign
echo "set-key-partition-list"
security set-key-partition-list -S apple-tool:,apple: -s -k mysecretpassword "${CODIUM_KEYCHAIN}"
echo "codesign"
if [[ "${VSCODE_QUALITY}" == "insider" ]]; then
codesign --deep --force --verbose --sign "${CERTIFICATE_OSX_ID}" "VSCodium - Insiders.app"
else
codesign --deep --force --verbose --sign "${CERTIFICATE_OSX_ID}" "VSCodium.app"
fi
# put back old keychain
security delete-keychain "${CODIUM_KEYCHAIN}"
security default-keychain -s "${DEFAULT_KEYCHAIN}"
cd ..
fi
@@ -57,6 +59,12 @@ if [[ "${OS_NAME}" == "osx" ]]; then
popd
fi
if [[ "${CI_BUILD}" != "no" ]]; then
# put back old keychain
security delete-keychain "${CODIUM_KEYCHAIN}"
security default-keychain -s "${DEFAULT_KEYCHAIN}"
fi
VSCODE_PLATFORM="darwin"
elif [[ "${OS_NAME}" == "windows" ]]; then
cd vscode || { echo "'vscode' dir not found"; exit 1; }