ChristophWurst / krankerl

A CLI helper to manage, package and publish Nextcloud apps
GNU General Public License v3.0
32 stars 5 forks source link

code signing support #819

Open onny opened 3 years ago

onny commented 3 years ago

Hey, thanks for this great tool. It is already very helpful in the development and publishing process. In an older blog post you wrote that you planned to support code-signing in krankerl but had issues with the json implementation. Code signing would be a really good feature otherwise I have to install several dependencies in my Gitlab CI config.

I guess the manual process looks something like this:

Best regards Jonas

ChristophWurst commented 3 years ago

Hi @onny,

it was indeed on my todo. The main issue was (is?) that Nextcloud uses the non-interoperable PHP json serializer and then signs this string. This method isn't trivial to reproduce with Rust. But I remember that I also discussed this with @rullzer and we wanted to change the signature format for this.

Another possible idea is to run the json serialization through php, like generate a tiny php script and run that through the php interpreter from Rust. That should give the same result.