From 2fa404e9af39d4871c14e70b607867f18cf7df76 Mon Sep 17 00:00:00 2001 From: Russel Waters Date: Mon, 4 Feb 2019 18:22:32 -0500 Subject: [PATCH] Sign windows (#1698) * Add Code signing to binaries before packaging * Sign depending on what was built --- appveyor.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/appveyor.yml b/appveyor.yml index da000b9234..b0cd8fe139 100644 --- a/appveyor.yml +++ b/appveyor.yml @@ -25,6 +25,14 @@ build: parallel: true verbosity: minimal after_build: +- ps: | + $path = Join-Path -Path "$env:TMP" -ChildPath csc.p12 + [IO.File]::WriteAllBytes($path, [Convert]::FromBase64String($env:CSC_LINK)) + Set-AppveyorBuildVariable -Name 'CSC_LINK' -Value $path +- cmd: | + "C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool.exe" sign /a /ph /tr http://timestamp.digicert.com /td sha256 /fd sha256 /f "%CSC_LINK%" /p "%CSC_KEY_PASSWORD%" "%APPVEYOR_BUILD_FOLDER%/%CONFIGURATION%/*.exe" +- ps: Remove-Item env:CSC_KEY_PASSWORD +- ps: Remove-Item -Path $env:CSC_LINK - cmd: >- cpack -C %CONFIGURATION% --verbose --config ./CPackConfig.cmake