Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(298)

Side by Side Diff: chrome_mac/Google Chrome Packaging/sign_versioned_dir.sh

Issue 85333005: Update reference builds to Chrome 32.0.1700.19 (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/deps/reference_builds/
Patch Set: Created 7 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « chrome_mac/Google Chrome Packaging/sign_app.sh ('k') | chrome_mac/Google Chrome Packaging/xz » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Property Changes:
Added: svn:executable
+ *
OLDNEW
(Empty)
1 #!/bin/bash -p
2
3 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
4 # Use of this source code is governed by a BSD-style license that can be
5 # found in the LICENSE file.
6
7 # Using codesign, sign the contents of the versioned directory. Namely, this
8 # includes the framework and helper app. After signing, the signatures are
9 # verified.
10
11 set -eu
12
13 # Environment sanitization. Set a known-safe PATH. Clear environment variables
14 # that might impact the interpreter's operation. The |bash -p| invocation
15 # on the #! line takes the bite out of BASH_ENV, ENV, and SHELLOPTS (among
16 # other features), but clearing them here ensures that they won't impact any
17 # shell scripts used as utility programs. SHELLOPTS is read-only and can't be
18 # unset, only unexported.
19 export PATH="/usr/bin:/bin:/usr/sbin:/sbin"
20 unset BASH_ENV CDPATH ENV GLOBIGNORE IFS POSIXLY_CORRECT
21 export -n SHELLOPTS
22
23 ME="$(basename "${0}")"
24 readonly ME
25
26 if [[ ${#} -ne 3 ]]; then
27 echo "usage: ${ME} app_path codesign_keychain codesign_id" >& 2
28 exit 1
29 fi
30
31 app_path="${1}"
32 codesign_keychain="${2}"
33 codesign_id="${3}"
34
35 versioned_dir="${app_path}/Contents/Versions/32.0.1700.19"
36
37 # An .app bundle to be signed can be signed directly. Normally, signing a
38 # framework bundle requires that each version within be signed individually.
39 # http://developer.apple.com/mac/library/technotes/tn2007/tn2206.html#TNTAG13
40 # In Chrome's case, the framework bundle is unversioned, so it too can be
41 # signed directly. See copy_framework_unversioned.sh.
42
43 framework="${versioned_dir}/Google Chrome Framework.framework"
44 helper_app="${versioned_dir}/Google Chrome Helper.app"
45 helper_eh_app="${versioned_dir}/Google Chrome Helper EH.app"
46 helper_np_app="${versioned_dir}/Google Chrome Helper NP.app"
47
48 requirement_suffix="\
49 and certificate leaf = H\"85cee8254216185620ddc8851c7a9fc4dfe120ef\"\
50 "
51
52 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" "${framework}" \
53 -r="designated => identifier \"com.google.Chrome.framework\" \
54 ${requirement_suffix}"
55 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" "${helper_app}" \
56 -r="designated => identifier \"com.google.Chrome.helper\" \
57 ${requirement_suffix}"
58 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \
59 "${helper_eh_app}" \
60 -r="designated => identifier \"com.google.Chrome.helper.EH\" \
61 ${requirement_suffix}"
62 codesign -s "${codesign_id}" --keychain "${codesign_keychain}" \
63 "${helper_np_app}" \
64 -r="designated => identifier \"com.google.Chrome.helper.NP\" \
65 ${requirement_suffix}"
66
67 # Verify everything.
68 codesign -v "${framework}"
69 codesign -v "${helper_app}"
70 codesign -v "${helper_eh_app}"
71 codesign -v "${helper_np_app}"
OLDNEW
« no previous file with comments | « chrome_mac/Google Chrome Packaging/sign_app.sh ('k') | chrome_mac/Google Chrome Packaging/xz » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698