2 # Copyright (C) 2012-2014 Felix Paul Kühne <fkuehne at videolan dot org>
4 # This program is free software; you can redistribute it and/or modify it
5 # under the terms of the GNU Lesser General Public License as published by
6 # the Free Software Foundation; either version 2.1 of the License, or
7 # (at your option) any later version.
9 # This program is distributed in the hope that it will be useful,
10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 # GNU Lesser General Public License for more details.
14 # You should have received a copy of the GNU Lesser General Public License
15 # along with this program; if not, write to the Free Software Foundation,
16 # Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
24 echo -e "[${green}codesign${normal}] $1"
32 Sign VLC.app in the current directory
37 -t Entitlements file to use
38 -g Enable additional magic
43 while getopts "hi:t:g" OPTION
54 OPTIONS="--entitlements $OPTARG"
61 shift $(($OPTIND - 1))
63 if [ "x$1" != "x" ]; then
71 info "Signing frameworks"
72 find VLC.app/Contents/Frameworks/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
74 info "Signing the executable"
75 codesign --force -s "$IDENTITY" $OPTIONS VLC.app/Contents/MacOS/VLC
77 info "Signing the modules"
78 find VLC.app/Contents/MacOS/plugins/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
80 info "Signing the libraries"
81 find VLC.app/Contents/MacOS/lib/* -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
83 info "Signing the lua stuff"
84 find VLC.app/Contents/MacOS/share/lua/* -name *luac -type f -exec codesign --force -s "$IDENTITY" $OPTIONS '{}' \;
86 FIRSTPARTOF_REQUIREMENT="=designated => anchor apple generic and identifier \""
87 SECONDPARTOF_REQUIREMENT="\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"75GAHG3SZQ\" ))"
89 info "Cleaning frameworks"
90 find VLC.app/Contents/Frameworks -type f -name ".DS_Store" -exec rm '{}' \;
91 find VLC.app/Contents/Frameworks -type f -name "*.textile" -exec rm '{}' \;
92 find VLC.app/Contents/Frameworks -type f -name "*.txt" -exec rm '{}' \;
94 info "Signing frameworks"
95 IDENTIFIER="com.binarymethod.BGHUDAppKit"
96 codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/BGHUDAppKit.framework/Versions/A
97 IDENTIFIER="com.growl.growlframework"
98 codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Growl.framework/Versions/A
99 IDENTIFIER="org.sparkle-project.Sparkle.Autoupdate"
100 codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Sparkle.framework/Resources/Autoupdate.app
101 IDENTIFIER="org.sparkle-project.Sparkle"
102 codesign --force --verbose -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/Frameworks/Sparkle.framework/Versions/A
104 info "Signing the framework headers"
105 for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.h" -exec echo {} \;`
107 fbname=$(basename "$i")
108 filename="${fbname%.*}"
110 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
113 info "Signing the framework strings"
114 for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.strings" -exec echo {} \;`
116 fbname=$(basename "$i")
117 filename="${fbname%.*}"
119 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
122 info "Signing the framework plist files"
123 for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.plist" -exec echo {} \;`
125 fbname=$(basename "$i")
126 filename="${fbname%.*}"
128 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
131 info "Signing the framework nib files"
132 for i in `find VLC.app/Contents/Frameworks/* -type f -name "*.nib" -exec echo {} \;`
134 fbname=$(basename "$i")
135 filename="${fbname%.*}"
137 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
140 info "Signing the headers"
141 for i in `find VLC.app/Contents/MacOS/include/* -type f -exec echo {} \;`
143 fbname=$(basename "$i")
144 filename="${fbname%.*}"
146 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
149 info "Signing the modules"
151 for i in `find VLC.app/Contents/MacOS/plugins/* -type f -exec echo {} \;`
153 fbname=$(basename "$i")
154 filename="${fbname%.*}"
156 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
159 info "Signing the libraries"
161 for i in `find VLC.app/Contents/MacOS/lib/* -type f -exec echo {} \;`
163 fbname=$(basename "$i")
164 filename="${fbname%.*}"
166 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
171 for i in `find VLC.app/Contents/MacOS/share/* -type f -exec echo {} \;`
173 fbname=$(basename "$i")
174 filename="${fbname%.*}"
176 codesign --force -s "$IDENTITY" --preserve-metadata=identifier,entitlements --requirements "$FIRSTPARTOF_REQUIREMENT$filename$SECONDPARTOF_REQUIREMENT" --timestamp=none $i
179 info "Signing the executable"
180 IDENTIFIER="org.videolan.vlc"
181 codesign --force -s "$IDENTITY" --requirements "$FIRSTPARTOF_REQUIREMENT$IDENTIFIER$SECONDPARTOF_REQUIREMENT" --timestamp=none VLC.app/Contents/MacOS/VLC
184 info "all items signed, validating..."
186 info "Validating frameworks"
187 codesign --verify -vv VLC.app/Contents/Frameworks/BGHUDAppKit.framework
188 codesign --verify -vv VLC.app/Contents/Frameworks/Growl.framework
189 codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework
191 info "Validating autoupdate app"
192 codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework/Versions/Current/Resources/Autoupdate.app
194 info "Validating complete bundle"
195 codesign --verify --deep --verbose=4 VLC.app
198 info "Validation complete"