/pidgin/main: a7dab773e3f6: Update win32 build to sign pidgin.ex...

[Daniel Atallah]

Changeset: a7dab773e3f6ee2b77be00a7c6104b73137a9903
Author:	 Daniel Atallah <datallah at pidgin.im>
Date:	 2012-09-19 22:57 -0400
Branch:	 release-2.x.y
URL: http://hg.pidgin.im/pidgin/main/rev/a7dab773e3f6

Description:

Update win32 build to sign pidgin.exe and the two installers using MS authenticode

 * This uses the signcode utility that mono provides.
 * https://developer.mozilla.org/en-US/docs/Signing_an_executable_with_Authenticode
 * 3 new build variables
 ** MONO_SIGNCODE - path to mono signcode utility ("signcode" by default)
 ** SIGNCODE_SPC - path to cert file (undefined by default - define in local.mak)
 ** SIGNCODE_PVK - path to private key file (undefined by default - define in local.mak)

diffstat:

 Makefile.mingw             |  18 ++++++++++++++++++
 libpurple/win32/global.mak |   1 +
 2 files changed, 19 insertions(+), 0 deletions(-)

diffs (46 lines):

diff --git a/Makefile.mingw b/Makefile.mingw
--- a/Makefile.mingw
+++ b/Makefile.mingw
@@ -139,13 +139,31 @@ create_release_install_dir: install
 	find $(STRIPPED_RELEASE_DIR) \( -name '*.dll' -o -name '*.exe' \) \
 	 -not \( -false $(EXTERNAL_DLLS_FIND_EXP) \) \
 	 -exec $(STRIP) --strip-unneeded {} ';'
+	$(MONO_SIGNCODE) \
+		-spc "$(SIGNCODE_SPC)" -v "$(SIGNCODE_PVK)" \
+		-a sha1 -$$ commercial \
+		-n "Pidgin $(PIDGIN_VERSION)" -i "https://pidgin.im" \
+		-t "http://timestamp.verisign.com/scripts/timstamp.dll" -tr 10 \
+		$(STRIPPED_RELEASE_DIR)/pidgin.exe
 
 installer: generate_installer_includes
 	$(MAKENSIS) -V3 -DPIDGIN_VERSION="$(PIDGIN_VERSION)" -DPIDGIN_PRODUCT_VERSION="$(PIDGIN_PRODUCT_VERSION)" -DPIDGIN_INSTALL_DIR="$(STRIPPED_RELEASE_DIR)" -DGTK_INSTALL_VERSION="$(GTK_INSTALL_VERSION)" pidgin/win32/nsis/pidgin-installer.nsi
+	$(MONO_SIGNCODE) \
+		-spc "$(SIGNCODE_SPC)" -v "$(SIGNCODE_PVK)" \
+		-a sha1 -$$ commercial \
+		-n "Pidgin Installer" -i "https://pidgin.im" \
+		-t "http://timestamp.verisign.com/scripts/timstamp.dll" -tr 10 \
+		pidgin/win32/nsis/pidgin-$(PIDGIN_VERSION).exe
 	mv pidgin/win32/nsis/pidgin-$(PIDGIN_VERSION).exe ./
 
 installer_offline: generate_installer_includes
 	$(MAKENSIS) -V3 -DPIDGIN_VERSION="$(PIDGIN_VERSION)" -DPIDGIN_PRODUCT_VERSION="$(PIDGIN_PRODUCT_VERSION)" -DOFFLINE_INSTALLER -DPIDGIN_INSTALL_DIR="$(STRIPPED_RELEASE_DIR)" -DGTK_INSTALL_VERSION="$(GTK_INSTALL_VERSION)" pidgin/win32/nsis/pidgin-installer.nsi
+	$(MONO_SIGNCODE) \
+		-spc "$(SIGNCODE_SPC)" -v "$(SIGNCODE_PVK)" \
+		-a sha1 -$$ commercial \
+		-n "Pidgin Installer" -i "https://pidgin.im" \
+		-t "http://timestamp.verisign.com/scripts/timstamp.dll" -tr 10 \
+		pidgin/win32/nsis/pidgin-$(PIDGIN_VERSION)-offline.exe
 	mv pidgin/win32/nsis/pidgin-$(PIDGIN_VERSION)-offline.exe ./
 
 installer_zip: create_release_install_dir
diff --git a/libpurple/win32/global.mak b/libpurple/win32/global.mak
--- a/libpurple/win32/global.mak
+++ b/libpurple/win32/global.mak
@@ -108,6 +108,7 @@ PERL ?= perl
 WINDRES ?= windres
 STRIP ?= strip
 INTLTOOL_MERGE ?= $(WIN32_DEV_TOP)/intltool_0.40.4-1_win32/bin/intltool-merge
+MONO_SIGNCODE ?= signcode
 
 PIDGIN_COMMON_RULES := $(PURPLE_TOP)/win32/rules.mak
 PIDGIN_COMMON_TARGETS := $(PURPLE_TOP)/win32/targets.mak