eclipse-cbi / org.eclipse.cbi

CBI Maven plugins and Webservices
https://eclipse-cbi.github.io/org.eclipse.cbi/
Eclipse Public License 2.0
1 stars 10 forks source link

feat: add support to use rcodesign for macosx signing service #525

Open netomi opened 2 months ago

netomi commented 2 months ago

This fixes #380 and #461.

The implementation itself is finished and working in local testing, however the deployment needs to be finalized.

On top of that signing needs to be checked with various file types and deep signing needs to be verified as well.

The used rcodesign version (latest release) has a bug handling pkg files, created a PR for the project to fix that.

netomi commented 2 months ago

staging service is deployed and a Jenkins job is running: https://ci.eclipse.org/cbi/job/webservices-monitoring/job/macos-signing-staging/

netomi commented 6 days ago

rcodesign 0.28.0 has been released including the necessary fix: https://github.com/indygreg/apple-platform-rs/releases/tag/apple-codesign%2F0.28.0

the fix is not mentioned in the release notes but I checked the files at the release commit and the change is present, will update the PR and test. Its in the changelog of the sub-crate where it was fixed: https://github.com/indygreg/apple-platform-rs/blob/main/apple-xar/CHANGELOG.md#0190