Merge pull request electron#125 from electron/sign-on-windows

kevinsawicki · kevinsawicki · commit c431c36f442f · 2016-04-14T08:55:15.000-07:00
Sign on windows, take two
diff --git a/package.json b/package.json
@@ -10,7 +10,8 @@
     "dev": "electron . --debug",
     "lint": "standard",
     "test": "mocha tests && npm run lint",
-    "sign-win": "signcode -spc ~/electron-api-demos.spc -v ~/electron-api-demos.pvk -a sha1 -$ commercial -n 'Electron API Demos' -i http://electron.atom.io  -t http://timestamp.verisign.com/scripts/timstamp.dll -tr 10 './out/Electron API Demos-win32-ia32/Electron API Demos.exe'",
+    "sign-win-exe": "./script/sign-exe.sh",
+    "sign-win-installer": "./script/sign-installer.sh",
     "pack-mac": "electron-packager . --asar --overwrite --platform=darwin --arch=x64 --icon=assets/app-icon/mac/app.icns --prune=true --out=out --osx-sign.identity='Developer ID Application: GitHub'",
     "pack-win": "electron-packager . ElectronAPIDemos --asar  --overwrite --platform=win32 --arch=ia32 --icon=assets/app-icon/win/app.ico --prune=true --out=out --version-string.CompanyName='GitHub, Inc.' --version-string.FileDescription='Electron API Demos' --version-string.ProductName='Electron API Demos'",
     "pack-lin": "electron-packager . --asar --overwrite --platform=linux --arch=x64 --icon=assets/app-icon/png/64.png --prune=true --out=out",
diff --git a/script/create-cert.sh b/script/create-cert.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+set -ex
+
+rm -f ~/electron-api-demos-key.pem
+rm -f ~/electron-api-demos-cert.pem
+rm -f ~/electron-api-demos.key
+rm -f ~/electron-api-demos.spc
+
+openssl pkcs12 -in "$1" -nocerts -nodes -out ~/electron-api-demos-key.pem
+openssl pkcs12 -in "$1" -nokeys -nodes -out ~/electron-api-demos-cert.pem
+openssl rsa -des3 -in ~/electron-api-demos-key.pem -out ~/electron-api-demos.key
+openssl crl2pkcs7 -nocrl -certfile ~/electron-api-demos-cert.pem -outform DER -out ~/electron-api-demos.spc
+
+rm -f ~/electron-api-demos-key.pem
+rm -f ~/electron-api-demos-cert.pem
diff --git a/script/sign-exe.sh b/script/sign-exe.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+set -ex
+
+EXE_PATH=./out/ElectronAPIDemos-win32-ia32/ElectronAPIDemos.exe
+SIGNED_EXE_PATH=./out/ElectronAPIDemos-win32-ia32/ElectronAPIDemosSigned.exe
+
+osslsigncode \
+  -spc ~/electron-api-demos.spc \
+  -key ~/electron-api-demos.key \
+  -h sha1 \
+  -n 'Electron API Demos' \
+  -i http://electron.atom.io  \
+  -t http://timestamp.verisign.com/scripts/timstamp.dll \
+  -in "$EXE_PATH" \
+  -out "$SIGNED_EXE_PATH"
+
+mv "$SIGNED_EXE_PATH" "$EXE_PATH"
+
+osslsigncode \
+  -spc ~/electron-api-demos.spc \
+  -key ~/electron-api-demos.key \
+  -h sha256 \
+  -n 'Electron API Demos' \
+  -i http://electron.atom.io  \
+  -t http://timestamp.verisign.com/scripts/timstamp.dll \
+  -nest \
+  -in "$EXE_PATH" \
+  -out "$SIGNED_EXE_PATH"
+
+mv "$SIGNED_EXE_PATH" "$EXE_PATH"
diff --git a/script/sign-installer.sh b/script/sign-installer.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+set -ex
+
+INSTALLER_PATH=./out/windows-installer/ElectronAPIDemosSetup.exe
+SIGNED_INSTALLER_PATH=./out/windows-installer/ElectronAPIDemosSetupSigned.exe
+
+osslsigncode \
+  -spc ~/electron-api-demos.spc \
+  -key ~/electron-api-demos.key \
+  -h sha1 \
+  -n 'Electron API Demos' \
+  -i http://electron.atom.io  \
+  -t http://timestamp.verisign.com/scripts/timstamp.dll \
+  -in "$INSTALLER_PATH" \
+  -out "$SIGNED_INSTALLER_PATH"
+
+mv "$SIGNED_INSTALLER_PATH" "$INSTALLER_PATH"
+
+osslsigncode \
+  -spc ~/electron-api-demos.spc \
+  -key ~/electron-api-demos.key \
+  -h sha256 \
+  -n 'Electron API Demos' \
+  -i http://electron.atom.io  \
+  -t http://timestamp.verisign.com/scripts/timstamp.dll \
+  -nest \
+  -in "$INSTALLER_PATH"\
+  -out "$SIGNED_INSTALLER_PATH"
+
+mv "$SIGNED_INSTALLER_PATH" "$INSTALLER_PATH"
