| OLD | NEW |
|---|
| 1 #!/bin/bash -p | 1 #!/bin/bash -p |
| 2 | 2 |
| 3 # Copyright (c) 2011 The Chromium Authors. All rights reserved. | 3 # Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 4 # Use of this source code is governed by a BSD-style license that can be | 4 # Use of this source code is governed by a BSD-style license that can be |
| 5 # found in the LICENSE file. | 5 # found in the LICENSE file. |
| 6 | 6 |
| 7 # Using codesign, sign the application. After signing, the signatures on the | 7 # Using codesign, sign the application. After signing, the signatures on the |
| 8 # inner bundle components are verified, and the application's own signature is | 8 # inner bundle components are verified, and the application's own signature is |
| 9 # verified. Inner bundle components are expected to be signed before this | 9 # verified. Inner bundle components are expected to be signed before this |
| 10 # script is called. See sign_versioned_dir.sh. | 10 # script is called. See sign_versioned_dir.sh. |
| 11 | 11 |
| 12 set -eu | 12 set -eu |
| 13 | 13 |
| (...skipping 24 matching lines...) Expand all Loading... |
| 38 browser_app_rules="${script_dir}/app_resource_rules.plist" | 38 browser_app_rules="${script_dir}/app_resource_rules.plist" |
| 39 | 39 |
| 40 versioned_dir="${app_path}/Contents/Versions/@VERSION@" | 40 versioned_dir="${app_path}/Contents/Versions/@VERSION@" |
| 41 | 41 |
| 42 browser_app="${app_path}" | 42 browser_app="${app_path}" |
| 43 framework="${versioned_dir}/@MAC_PRODUCT_NAME@ Framework.framework" | 43 framework="${versioned_dir}/@MAC_PRODUCT_NAME@ Framework.framework" |
| 44 helper_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper.app" | 44 helper_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper.app" |
| 45 helper_eh_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper EH.app" | 45 helper_eh_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper EH.app" |
| 46 helper_np_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper NP.app" | 46 helper_np_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper NP.app" |
| 47 | 47 |
| 48 requirement_string="\ |
| 49 (identifier \"com.google.Chrome\" or identifier \"com.google.Chrome.canary\") \ |
| 50 and (certificate leaf = H\"85cee8254216185620ddc8851c7a9fc4dfe120ef\" or \ |
| 51 certificate leaf = H\"9481882581d8178db8b1649c0eaa4f9eb11288f0\")\ |
| 52 " |
| 53 |
| 48 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \ | 54 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \ |
| 49 "${browser_app}" --resource-rules "${browser_app_rules}" | 55 "${browser_app}" --resource-rules "${browser_app_rules}" \ |
| 56 -r="${requirement_string}" |
| 50 | 57 |
| 51 # Verify everything. Check the framework and helper apps to make sure that the | 58 # Verify everything. Check the framework and helper apps to make sure that the |
| 52 # signatures are present and weren't altered by the signing process. | 59 # signatures are present and weren't altered by the signing process. |
| 53 codesign -v "${framework}" | 60 codesign -v "${framework}" |
| 54 codesign -v "${helper_app}" | 61 codesign -v "${helper_app}" |
| 55 codesign -v "${helper_eh_app}" | 62 codesign -v "${helper_eh_app}" |
| 56 codesign -v "${helper_np_app}" | 63 codesign -v "${helper_np_app}" |
| 57 codesign -v "${browser_app}" | 64 codesign -v "${browser_app}" |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 10344009:
Implement Keychain reauthorization (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src/