diff options
| author | Tor Lillqvist <tml@collabora.com> | 2014-09-19 22:58:16 +0300 |
|---|---|---|
| committer | Tor Lillqvist <tml@collabora.com> | 2014-10-20 16:27:45 +0300 |
| commit | de1e0ff497bdcc0656a4bb79b50ba1f6b66b3f8f (patch) | |
| tree | 12b1855981fa8f2d308dac2fa3e9886e29ded979 /Makefile.in | |
| parent | ea98cf0de4a618297df74fecc6ee31e4ed4008d1 (diff) | |
OS X code signing fixes
Remove unnecessary Python executables and stuff that complicates code
signing in the test-install target.
Sign executables in codesign-macosx-app-bundle, not when building
them. It is more uniform to do all code signing in just one place.
Don't bother signing data files in the sandboxed case, we assume we
then also use the "Mac-like" app structure and they are all under
Resources anyway and get handled that way.
All executables must have the com.apple.security.app-sandbox
entitlement.
The bundle signature's identifier must equal the bundle identifier.
The code signature identifiers of an embedded bundle needs to match
the embedded bundle's identifier.
Need the entitlements for embedded app executables too.
Change-Id: Ic6a640eb03964fe9ce75d3a8fff071971a3e1939
Diffstat (limited to 'Makefile.in')
| -rw-r--r-- | Makefile.in | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/Makefile.in b/Makefile.in index e99ca439f38b..c8ab64bfaa0c 100644 --- a/Makefile.in +++ b/Makefile.in @@ -294,6 +294,7 @@ ifeq ($(OS_FOR_BUILD),WNT) else @ooinstall $(TESTINSTALLDIR) ifneq ($(MACOSX_CODESIGNING_IDENTITY),) +# # Unzip bin/InfoPlist_*.zip files into corresponding Resources/*.lproj directories. set -x; for F in $(TESTINSTALLDIR)/LibreOffice$(if $(ENABLE_RELEASE_BUILD),,Dev).app/Contents/bin/InfoPlist_*.zip; do \ bn=`basename $$F .zip`; \ @@ -302,8 +303,18 @@ ifneq ($(MACOSX_CODESIGNING_IDENTITY),) mkdir $$lproj; \ (cd $$lproj; unzip $$F); \ done +# # And remove the "bin" folder which should not be there rm -rf $(TESTINSTALLDIR)/LibreOffice$(if $(ENABLE_RELEASE_BUILD),,Dev).app/Contents/bin +# +# Remove unnecessary executables in the LibreOfficePython framework + rm -rf $(TESTINSTALLDIR)/LibreOffice$(if $(ENABLE_RELEASE_BUILD),,Dev).app/Contents/Frameworks/LibreOfficePython.framework/Versions/[1-9]*/bin +# +# Remove the python.o object file which is weird and interferes with app store uploading +# And with it removed, presumably the other stuff in the Python lib/python3.3/config-3.3m probably does not make sense either. + rm -rf $(TESTINSTALLDIR)/LibreOffice$(if $(ENABLE_RELEASE_BUILD),,Dev).app/Contents/Frameworks/LibreOfficePython.framework/Versions/[1-9]*/lib/python[1-9]*/config-[1-9]* +# +# Then use the macosx-codesign-app-bundle script @macosx-codesign-app-bundle $(TESTINSTALLDIR)/LibreOffice$(if $(ENABLE_RELEASE_BUILD),,Dev).app endif endif |