From 66454776e908b14313bdfacd2dc830f7369ed3c0 Mon Sep 17 00:00:00 2001
From: Martin Lippert <mlippert@pivotal.io>
Date: Fri, 22 Nov 2019 08:55:05 +0100
Subject: [PATCH] first steps towards signing the windows executable

---
 .../pom.xml                                   | 34 +++++++++++++++++++
 eclipse-distribution/pom.xml                  |  3 +-
 2 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml b/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
index 0d22972b2..f2af9657e 100644
--- a/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
+++ b/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
@@ -132,6 +132,40 @@
 				<version>1.7</version>
 				<executions>
 
+					<!-- win exe signing reguires the npm module osslsigncode to be installed on the build machine and the corresponding keys to be around in PKCS#12 format -->
+					<execution>
+						<id>win-exe-signing</id>
+						<phase>package</phase>
+						<configuration>
+							<skip>${skip.win.signing}</skip>
+							<target>
+
+								<taskdef resource="net/sf/antcontrib/antcontrib.properties" />
+
+								<exec executable="osslsigncode" failonerror="true">
+									<arg value="sign"/>
+									<arg value="-pkcs12"/>
+									<arg value="${env.WIN_KEY_LOCATION}"/>
+									<arg value="-askpass"/>
+									<arg value="-n"/>
+									<arg value="Spring Tools 4"/>
+								    <arg value="-i"/>
+								    <arg value="https://spring.io"/>
+								    <arg value="-t"/>
+								    <arg value="http://timestamp.digicert.com"/>
+									<arg value="-in"/>
+									<arg value="${project.build.directory}/products/org.springframework.boot.ide.branding.sts4/win32/win32/x86_64/sts-${unqualifiedVersion}.${p2.qualifier}/SpringToolSuite4.exe"/>
+									<arg value="-out"/>
+								    <arg value="${project.build.directory}/products/org.springframework.boot.ide.branding.sts4/win32/win32/x86_64/sts-${unqualifiedVersion}.${p2.qualifier}/SpringToolSuite4.exe"/>
+								</exec>
+
+							</target>
+						</configuration>
+						<goals>
+							<goal>run</goal>
+						</goals>
+					</execution>
+
 					<!-- macos code signing requires the build to run on a macOS machine with Xcode installed, including the appropriate Apple Developer certificates for code signing -->
 					<execution>
 						<id>osx-app-signing</id>
diff --git a/eclipse-distribution/pom.xml b/eclipse-distribution/pom.xml
index 7f06d15e4..d1f8cb5f5 100644
--- a/eclipse-distribution/pom.xml
+++ b/eclipse-distribution/pom.xml
@@ -55,7 +55,8 @@
 		<signing.alias>pivotal</signing.alias>
 		<signing.keystore>~/.keytool/pivotal.jks</signing.keystore>
 
-		<!-- OSX app signing and notarizing-->
+		<!-- signing and notarizing (win exe signing + macOS app signing and notarizing-->
+		<skip.win.signing>true</skip.win.signing>
 		<skip.osx.signing>true</skip.osx.signing>
 		<skip.osx.notarizing>true</skip.osx.notarizing>