kid3/macosx/mac-codesign.cmake

0001 if(NOT DEFINED ENV{SIGNING_IDENTITY})
0002   message(WARNING "Environment variable SIGNING_IDENTITY not set, not signing")
0003   return()
0004 endif()
0005 set(SIGNING_IDENTITY $ENV{SIGNING_IDENTITY})
0006 set(CODESIGN codesign --force --sign "${SIGNING_IDENTITY}" --options=runtime)
0007 if(CMAKE_SCRIPT_MODE_FILE AND NOT CMAKE_PARENT_LIST_FILE)
0008   set(_pathToParent "${CMAKE_CURRENT_SOURCE_DIR}/./")
0009 else()
0010   set(_pathToParent "$ENV{DESTDIR}${CMAKE_INSTALL_PREFIX}/./")
0011 endif()
0012 set(_bundleName "kid3.app")
0013 set(_pathToBundle "${_pathToParent}/${_bundleName}")
0014
0015 execute_process(
0016   COMMAND xcrun -f codesign_allocate
0017   OUTPUT_STRIP_TRAILING_WHITESPACE
0018   OUTPUT_VARIABLE CODESIGN_ALLOCATE
0019 )
0020
0021 execute_process(
0022   COMMAND find "${_bundleName}/Contents/PlugIns" -type f -d -print
0023   WORKING_DIRECTORY "${_pathToParent}"
0024   OUTPUT_VARIABLE _pluginFilesToSign
0025 )
0026
0027 execute_process(
0028   COMMAND find "${_bundleName}" \( -name "*.framework" -or -name "*.dylib" \) -d -print
0029   WORKING_DIRECTORY "${_pathToParent}"
0030   OUTPUT_VARIABLE _libFilesToSign
0031 )
0032
0033 string(STRIP ${_pluginFilesToSign} _pluginFilesToSign)
0034 string(STRIP ${_libFilesToSign} _libFilesToSign)
0035 string(REPLACE "\n" ";" _pluginFilesToSign ${_pluginFilesToSign})
0036 string(REPLACE "\n" ";" _libFilesToSign ${_libFilesToSign})
0037 set(_filesToSign ${_pluginFilesToSign} ${_libFilesToSign})
0038 list(APPEND _filesToSign
0039   "${_bundleName}/Contents/MacOS/kid3"
0040   "${_bundleName}/Contents/MacOS/kid3-cli"
0041   "${_bundleName}"
0042 )
0043 list(REMOVE_DUPLICATES _filesToSign)
0044
0045 message(STATUS "Signing ${_bundleName}")
0046 foreach(_fileToSign ${_filesToSign})
0047   execute_process(
0048     COMMAND cmake -E env CODESIGN_ALLOCATE=${CODESIGN_ALLOCATE} ${CODESIGN} "${_fileToSign}"
0049     WORKING_DIRECTORY "${_pathToParent}"
0050     RESULT_VARIABLE _result
0051   )
0052   if(NOT (${_result} EQUAL 0))
0053     message(WARNING "Could not sign file '${_fileToSign}'")
0054   endif()
0055 endforeach()
0056
0057 execute_process(
0058   COMMAND codesign --verify "${_pathToParent}/${_bundleName}"
0059   RESULT_VARIABLE _result
0060 )
0061 if(NOT ${_result} EQUAL 0)
0062   message(FATAL_ERROR "Signature verification failed")
0063 endif()
0064
0065 execute_process(
0066   COMMAND spctl --assess --type execute "${_pathToParent}/${_bundleName}"
0067   RESULT_VARIABLE _result
0068 )
0069 if(NOT ${_result} EQUAL 0)
0070   message(WARNING "Signature assessment failed")
0071 endif()