mirror of
https://github.com/simplex-chat/simplex-chat.git
synced 2026-10-23 17:13:10 +00:00
EvgenyandEvgeny @ SimpleX Chat
1cbbe82517
* ci: fix mac library build to sign and notarize library * script * sign and notarize to test * remove test build --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com>
32 lines
1.1 KiB
Bash
Executable File
32 lines
1.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -euo pipefail
|
|
|
|
libs=$1
|
|
team=5NN7GUYB6T
|
|
keychain=/tmp/simplex.keychain
|
|
temp=$(mktemp -d)
|
|
trap 'rm -rf "$keychain" "$temp"' EXIT
|
|
|
|
notarytool() {
|
|
xcrun notarytool "$@" --apple-id "$APPLE_SIMPLEX_NOTARIZATION_APPLE_ID" --password "$APPLE_SIMPLEX_NOTARIZATION_PASSWORD" --team-id "$team"
|
|
}
|
|
|
|
echo "$APPLE_SIMPLEX_SIGNING_KEYCHAIN" | base64 --decode -o "$keychain"
|
|
security unlock-keychain -p "" "$keychain"
|
|
security list-keychains -s $(security list-keychains | xargs) "$keychain"
|
|
|
|
for lib in "$libs"/*.dylib; do
|
|
codesign --remove-signature "$lib"
|
|
codesign --timestamp --options runtime --force --sign "Developer ID Application: SimpleX Chat Ltd ($team)" --keychain "$keychain" "$lib"
|
|
done
|
|
|
|
ditto -c -k --keepParent "$libs" "$temp/libs.zip"
|
|
notarytool submit "$temp/libs.zip" --wait --timeout 1h --output-format json > "$temp/submission.json" || true
|
|
cat "$temp/submission.json"
|
|
read -r id status < <(python3 -c 'import json, sys; r = json.load(open(sys.argv[1])); print(r["id"], r["status"])' "$temp/submission.json")
|
|
notarytool log "$id"
|
|
if [ "$status" != Accepted ]; then
|
|
exit 1
|
|
fi
|