8131d2cf432e6b3349694d055e6947c63193fda5
[vlc.git] / extras / package / macosx / codesign.sh
1 #!/bin/bash
2 # Copyright (C) 2012-2014 Felix Paul K├╝hne <fkuehne at videolan dot org>
3 #
4 # This program is free software; you can redistribute it and/or modify it
5 # under the terms of the GNU Lesser General Public License as published by
6 # the Free Software Foundation; either version 2.1 of the License, or
7 # (at your option) any later version.
8 #
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU Lesser General Public License for more details.
13 #
14 # You should have received a copy of the GNU Lesser General Public License
15 # along with this program; if not, write to the Free Software Foundation,
16 # Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
17
18 set -e
19
20 info()
21 {
22     green='\x1B[1;32m'
23     normal='\x1B[0m'
24     echo -e "[${green}codesign${normal}] $1"
25 }
26
27 usage()
28 {
29 cat << EOF
30 usage: $0 [options]
31
32 Sign VLC.app in the current directory
33
34 OPTIONS:
35    -h            Show this help
36    -i            Identity to use
37    -t            Entitlements file to use
38    -g            Enable additional magic
39 EOF
40
41 }
42
43 while getopts "hi:t:g" OPTION
44 do
45      case $OPTION in
46          h)
47              usage
48              exit 1
49          ;;
50          i)
51              IDENTITY=$OPTARG
52          ;;
53          t)
54              OPTIONS="--entitlements $OPTARG"
55          ;;
56          g)
57              GK="yes"
58          ;;
59      esac
60 done
61 shift $(($OPTIND - 1))
62
63 if [ "x$1" != "x" ]; then
64     usage
65     exit 1
66 fi
67
68 if test -z "$GK"
69 then
70
71     info "Signing frameworks"
72     find VLC.app/Contents/Frameworks/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
73
74     info "Signing the executable"
75     codesign --force -s "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC
76
77     info "Signing the modules"
78     find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
79
80     info "Signing the libraries"
81     find VLC.app/Contents/MacOS/lib/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
82
83     info "Signing the lua stuff"
84     find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
85 else
86     FIRSTPARTOF_REQUIREMENT="=designated => anchor apple generic  and identifier \""
87     SECONDPARTOF_REQUIREMENT="\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists  and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
88
89     info "Cleaning frameworks"
90     find VLC.app/Contents/Frameworks -type f -name ".DS_Store" -exec rm '{}' \;
91     find VLC.app/Contents/Frameworks -type f -name "*.textile" -exec rm '{}' \;
92     find VLC.app/Contents/Frameworks -type f -name "*.txt" -exec rm '{}' \;
93
94     info "Signing frameworks"
95     IDENTIFIER="com.binarymethod.BGHUDAppKit"
96     codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/BGHUDAppKit.framework/Versions/A
97     IDENTIFIER="com.growl.growlframework"
98     codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Growl.framework/Versions/A
99     IDENTIFIER="org.sparkle-project.Sparkle.Autoupdate"
100     codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Sparkle.framework/Resources/Autoupdate.app
101     IDENTIFIER="org.sparkle-project.Sparkle"
102     codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A
103
104     info "Signing the framework headers"
105     for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.h" -exec echo {} \;`
106     do
107         fbname=$(basename "$i")
108         filename="${fbname%.*}"
109
110         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
111     done
112
113     info "Signing the framework strings"
114     for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.strings" -exec echo {} \;`
115     do
116         fbname=$(basename "$i")
117         filename="${fbname%.*}"
118
119         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
120     done
121
122     info "Signing the framework plist files"
123     for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.plist" -exec echo {} \;`
124     do
125         fbname=$(basename "$i")
126         filename="${fbname%.*}"
127
128         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
129     done
130
131     info "Signing the framework nib files"
132     for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.nib" -exec echo {} \;`
133     do
134         fbname=$(basename "$i")
135         filename="${fbname%.*}"
136
137         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
138     done
139
140     info "Signing the headers"
141     for i in `find VLC.app/Contents/MacOS/include/* -type f -exec echo {} \;`
142     do
143         fbname=$(basename "$i")
144         filename="${fbname%.*}"
145
146         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
147     done
148
149     info "Signing the modules"
150
151     for i in `find VLC.app/Contents/MacOS/plugins/* -type f -exec echo {} \;`
152     do
153         fbname=$(basename "$i")
154         filename="${fbname%.*}"
155
156         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
157     done
158
159     info "Signing the libraries"
160
161     for i in `find VLC.app/Contents/MacOS/lib/* -type f -exec echo {} \;`
162     do
163         fbname=$(basename "$i")
164         filename="${fbname%.*}"
165
166         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
167     done
168
169     info "Signing share"
170
171     for i in `find VLC.app/Contents/MacOS/share/* -type f -exec echo {} \;`
172     do
173         fbname=$(basename "$i")
174         filename="${fbname%.*}"
175
176         codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
177     done
178
179     info "Signing the executable"
180     IDENTIFIER="org.videolan.vlc"
181     codesign --force -s "$IDENTITY" --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/MacOS/VLC
182 fi
183
184 info "all items signed, validating..."
185
186 info "Validating frameworks"
187 codesign --verify -vv VLC.app/Contents/Frameworks/BGHUDAppKit.framework
188 codesign --verify -vv VLC.app/Contents/Frameworks/Growl.framework
189 codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework
190
191 info "Validating autoupdate app"
192 codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework/Versions/Current/Resources/Autoupdate.app
193
194 info "Validating complete bundle"
195 codesign --verify --deep --verbose=4 VLC.app
196
197
198 info "Validation complete"