Add the ability to run a custom command for signing the binaries release-2.x.y

Tue, 21 Jan 2025 23:50:29 -0600

author
Gary Kramlich <grim@reaperworld.com>
date
Tue, 21 Jan 2025 23:50:29 -0600
branch
release-2.x.y
changeset 43155
624e30955003
parent 43154
10ae9c0f0cbf
child 43156
eb22b625ecad

Add the ability to run a custom command for signing the binaries

This allows you to do customize the entire signing process via your `local.mak`.

Mine looks like this

```
CUSTOM_AUTHENTICODE=/home/grim/sign.bat
```

And then my `sign.bat` does a whole lot of magic I'll document elsewhere.

Testing Done:
Ran `make -f Makefile.mingw installers` too many times to count.

Reviewed at https://reviews.imfreedom.org/r/3778/

Makefile.mingw file | annotate | diff | comparison | revisions
--- a/Makefile.mingw	Tue Jan 21 10:49:29 2025 -0600
+++ b/Makefile.mingw	Tue Jan 21 23:50:29 2025 -0600
@@ -55,6 +55,11 @@
 authenticode_sign = $(call osslsigncode_sign,$(1),$(2),sha1) && \
 		    $(call osslsigncode_sign,$(1),$(2),sha256 -nest)
 else
+ifdef CUSTOM_AUTHENTICODE
+# This will call whatever program you specific in CUSTOM_AUTHENTICODE. It will
+# pass the input file as the first parameter and the description as the second.
+authenticode_sign = $(CUSTOM_AUTHENTICODE) $(1) $(2)
+else
 authenticode_sign = $(MONO_SIGNCODE) \
 		    -spc "$(SIGNCODE_SPC)" -v "$(SIGNCODE_PVK)" \
 		    -a sha1 -$$ commercial \
@@ -63,6 +68,7 @@
 		    $(1) && rm -f $(1).bak
 endif
 endif
+endif
 
 gpg_sign = $(GPG_SIGN) -ab $(1) && $(GPG_SIGN) --verify $(1).asc
 

mercurial