Enable hardened runtime when building MacOS packages as it is now required.

This commit is contained in:
Kenneth Skovhede
2020-02-18 14:10:15 +01:00
parent ce7180d599
commit 679981d29f
+4 -4
View File
@@ -137,11 +137,11 @@ if [ "x${CODESIGN_IDENTITY}" != "x" ]; then
# These files have dependencies, so we need to sign them in the correct order
for file in "duplicati-cli" "duplicati-server" "uninstall.sh"; do
codesign -s "${CODESIGN_IDENTITY}" "Duplicati.app/Contents/MacOS/${file}"
codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "Duplicati.app/Contents/MacOS/${file}"
done
# Then sign the whole package
codesign -s "${CODESIGN_IDENTITY}" "Duplicati.app"
codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "Duplicati.app"
else
echo "No codesign identity supplied, skipping bundle signing"
fi
@@ -229,9 +229,9 @@ rm -rf "$WC_DIR"
if [ "x${CODESIGN_IDENTITY}" != "x" ]; then
echo "Codesigning DMG image"
codesign -s "${CODESIGN_IDENTITY}" "${OUTPUT_DMG}"
codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "${OUTPUT_DMG}"
else
echo "No codesign identity supplied, skipping DMG signing"
fi
echo "Done, created ${OUTPUT_DMG}"
echo "Done, created ${OUTPUT_DMG}"