diff --git a/.github/scripts/sign-osx-distro-file.sh b/.github/scripts/sign-osx-distro-file.sh index 6fde0f002..0be41faed 100755 --- a/.github/scripts/sign-osx-distro-file.sh +++ b/.github/scripts/sign-osx-distro-file.sh @@ -4,6 +4,7 @@ set -e file=$1 entitlements=$2 icns=$3 + filename="$(basename -- $file)" dir="$(dirname "$file")" @@ -26,7 +27,23 @@ done # sign libjansi.jnilib inside kotlin-compiler-embeddable.jar for f in `find ${dir}/${destination_folder_name}/SpringToolSuite4.app -type f | grep -E ".*/kotlin-compiler-embeddable.*\.jar$"` do - ./sign-jnilib-files-inside-jar.sh $f $entitlements + echo "Looking for 'libjansi.jnilib' files inside ${f} to sign..." + f_name="$(basename -- $f)" + extracted_jar_dir=extracted_${f_name} + rm -rf $extracted_jar_dir + mkdir $extracted_jar_dir + echo "Extracting archive ${f}" + unzip -q $f -d ./${extracted_jar_dir} + for jnilib_file in `find $extracted_jar_dir -type f | grep -E ".*/libjansi\.jnilib$"` + do + echo "Signing binary file: ${jnilib_file}" + codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $jnilib_file + done + cd $extracted_jar_dir + zip -r -u $f . + cd .. + rm -rf $extracted_jar_dir + echo "Signing binary file: ${f}" codesign --verbose --deep --force --timestamp --entitlements "${entitlements}" --options=runtime --keychain "${KEYCHAIN}" -s "${MACOS_CERTIFICATE_ID}" $f done