search

facebookarchive / xcbuild

Xcode-compatible build tool.
Other
2k stars 190 forks source link

Support for codesigning binaries #44

Open conradev opened 8 years ago

conradev commented 8 years ago

The ability to codesign binaries upon build would be great to have, reading from CODE_SIGN_IDENTITY and CODE_SIGN_ENTITLEMENTS.

One thing I didn't realize until recently is that ldid supports full codesigning, so to be able to use either codesign (OS X-only) or ldid (cross platform) to sign the binary would be awesome.

samdmarshall commented 8 years ago

the codesign binaries are fully able to be compiled from source. I don't see why we cannot use those.

conradev commented 8 years ago

@samdmarshall Do they have OS X-specific dependencies?

samdmarshall commented 8 years ago

I would have to double check, but I don't think there are any additional requirements that wouldn't also be able to be compiled from source.

kphillisjr commented 8 years ago

From what I can figure out codesigning on OSX is mostly a post-process development phase. Details on this can be found at these two links:

Apple: Mac Developer Library: Code Signing Guide.

Apple: Mac Developer Library: Technical Note TN2206: OS X Code Signing In Depth

grp commented 8 years ago

Yeah, it is. It's fairly simple to sign binaries yourself with codesign -s <identity> /path/to.app after a build, but it would be better to integrate into the build as it should be.