mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-04-28 18:02:38 +02:00
a915ae8442
- WiX Toolset v3 used to validate the msi package by default. In v5 that has moved to a new command, so add a new validation step to the script. - Also emove the step that uses `insignia.exe` to sign the Dangerzone.msi with the digital signatures from its external cab archives. In WiX Toolset v4 and newer, insignia is replaced with a new command `wix msi inscribe`, but we tell wix to embed the cabinets into the .msi (That's what`EmbedCab="yes"` in the Media / MediaTemplate element does) so singning them separately is not necessary. [0] [0] https://wixtoolset.org/docs/tools/signing/
39 lines
1.3 KiB
Batchfile
39 lines
1.3 KiB
Batchfile
REM delete old dist and build files
|
|
rmdir /s /q dist
|
|
rmdir /s /q build
|
|
|
|
REM build the gui and cli exe
|
|
python .\setup-windows.py build
|
|
|
|
REM code sign dangerzone.exe
|
|
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone.exe
|
|
|
|
REM verify the signature of dangerzone.exe
|
|
signtool.exe verify /pa build\exe.win-amd64-3.12\dangerzone.exe
|
|
|
|
REM code sign dangerzone-cli.exe
|
|
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone-cli.exe
|
|
|
|
REM verify the signature of dangerzone-cli.exe
|
|
signtool.exe verify /pa build\exe.win-amd64-3.12\dangerzone-cli.exe
|
|
|
|
REM build the wxs file
|
|
python install\windows\build-wxs.py
|
|
|
|
REM build the msi package
|
|
cd build
|
|
wix build -ext WixToolset.UI.wixext .\Dangerzone.wxs -out Dangerzone.msi
|
|
|
|
REM validate Dangerzone.msi
|
|
wix msi validate Dangerzone.msi
|
|
|
|
REM code sign Dangerzone.msi
|
|
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ Dangerzone.msi
|
|
|
|
REM verify the signature of Dangerzone.msi
|
|
signtool.exe verify /pa Dangerzone.msi
|
|
|
|
REM move Dangerzone.msi to dist
|
|
cd ..
|
|
mkdir dist
|
|
move build\Dangerzone.msi dist
|