Files
firezone/scripts/build/sign.sh
Reactor Scram f1cd137e24 feat(rust/gui-client/windows): sign the IPC service exe (#7009)
Closes #7008.

We already signed the GUI exe and the entire MSI package, but when
adding the IPC service we overlooked that one.
This PR:
- Modifies the signing script to accept multiple EXEs
- Modifies the Tauri bundle command to sign both exes
- Updates the changelog

![image](https://github.com/user-attachments/assets/ba58c540-dd0c-42b4-ba62-9c96fc4682c5)
2024-10-11 20:32:50 +00:00

20 lines
594 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
if ! command -v AzureSignTool &>/dev/null; then
echo "AzureSignTool not installed. Signing will be skipped."
exit
fi
for exe in "$@"
do
AzureSignTool sign \
--azure-key-vault-url "$AZURE_KEY_VAULT_URI" \
--azure-key-vault-client-id "$AZURE_CLIENT_ID" \
--azure-key-vault-tenant-id "$AZURE_TENANT_ID" \
--azure-key-vault-client-secret "$AZURE_CLIENT_SECRET" \
--azure-key-vault-certificate "$AZURE_CERT_NAME" \
--timestamp-rfc3161 "http://timestamp.digicert.com" \
--verbose "$exe"
done