mirror of
https://github.com/arduino/arduino-ide.git
synced 2025-04-28 01:07:18 +00:00
4f8b9800a0
The "build" workflow signs the macOS and Windows builds of the application. The signing process relies on access to GitHub Actions secrets. For this reason, the workflow is configured to only sign the builds when it has access to GitHub Actions secrets to avoid spurious failures of the workflow that would otherwise be caused by signing failure. A flexible general purpose system for determining whether to attempt signing of a build was established years ago. However, a redundant system was added specific to the Windows build instead of using the existing system. The redundant system is hereby removed. This makes the workflow easier to understand and maintain.
31 lines
1.2 KiB
JavaScript
31 lines
1.2 KiB
JavaScript
const childProcess = require('child_process');
|
|
|
|
exports.default = async function (configuration) {
|
|
if (!process.env.GITHUB_ACTIONS || process.env.CAN_SIGN !== 'true') {
|
|
return;
|
|
}
|
|
|
|
const SIGNTOOL_PATH = process.env.SIGNTOOL_PATH;
|
|
const INSTALLER_CERT_WINDOWS_CER = process.env.INSTALLER_CERT_WINDOWS_CER;
|
|
const CERT_PASSWORD = process.env.WIN_CERT_PASSWORD;
|
|
const CONTAINER_NAME = process.env.WIN_CERT_CONTAINER_NAME;
|
|
const filePath = configuration.path;
|
|
|
|
if (
|
|
SIGNTOOL_PATH &&
|
|
INSTALLER_CERT_WINDOWS_CER &&
|
|
CERT_PASSWORD &&
|
|
CONTAINER_NAME
|
|
) {
|
|
childProcess.execSync(
|
|
`"${SIGNTOOL_PATH}" sign -d "Arduino IDE" -f "${INSTALLER_CERT_WINDOWS_CER}" -csp "eToken Base Cryptographic Provider" -k "[{{${CERT_PASSWORD}}}]=${CONTAINER_NAME}" -fd sha256 -tr http://timestamp.digicert.com -td SHA256 -v "${filePath}"`,
|
|
{ stdio: 'inherit' }
|
|
);
|
|
} else {
|
|
console.warn(
|
|
`Custom windows signing was no performed one of the following variables was not provided: SIGNTOOL_PATH (${SIGNTOOL_PATH}), INSTALLER_CERT_WINDOWS_CERT (${INSTALLER_CERT_WINDOWS_CER}), CERT_PASSWORD (${CERT_PASSWORD}), CONTAINER_NAME (${CONTAINER_NAME})`
|
|
);
|
|
process.exit(1);
|
|
}
|
|
};
|