summaryrefslogtreecommitdiff
path: root/evergreen/garasign_jsign_sign.sh
blob: 3ae3176cae9a853f22b4f319d58afee754d178bc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" > /dev/null 2>&1 && pwd)"
. "$DIR/prelude.sh"

set -o errexit
set -o verbose

cd src

msi_filename=mongodb-${push_name}-${push_arch}-${suffix}.msi
/usr/bin/find build/ -type f | grep msi$ | xargs -I original_filename cp original_filename $msi_filename || true

# generating checksums
if [ -e $msi_filename ]; then
  shasum -a 1 $msi_filename | tee $msi_filename.sha1
  shasum -a 256 $msi_filename | tee $msi_filename.sha256
  md5sum $msi_filename | tee $msi_filename.md5
else
  echo "$msi_filename does not exist. Skipping checksum generation"
fi

# signing windows artifacts with jsign
cat << 'EOF' > jsign_signing_commands.sh
function sign(){
  if [ -e $1 ]
  then
    jsign -a mongo-authenticode-2021 --replace --tsaurl http://timestamp.digicert.com -d SHA-256 $1
  else
    echo "$1 does not exist. Skipping signing"
  fi
}
EOF
cat << EOF >> jsign_signing_commands.sh
sign $msi_filename
EOF

podman run \
  -e GRS_CONFIG_USER1_USERNAME=${garasign_jsign_username} \
  -e GRS_CONFIG_USER1_PASSWORD=${garasign_jsign_password} \
  --rm \
  -v $(pwd):$(pwd) -w $(pwd) \
  ${garasign_jsign_image} \
  /bin/bash -c "$(cat ./jsign_signing_commands.sh)"