Skip to content

Commit

Permalink
Update test-sign-installer.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
PetervanLunteren authored Feb 19, 2025
1 parent 107c701 commit 1269b20
Showing 1 changed file with 19 additions and 6 deletions.
25 changes: 19 additions & 6 deletions .github/workflows/test-sign-installer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,17 +22,30 @@ jobs:
Set-Content -Path code_ca_bundle_cert.pem -Value "${{ secrets.CODE_CA_BUNDLE_CERT }}"
- name: Sign installer
shell: pwsh
run: |
REM download the installer from the given URL
curl -L -o windows-installer-latest.exe https://storage.googleapis.com/github-release-files-storage/latest/windows-installer-latest.exe
REM verify
# Download the installer from the given URL
Invoke-WebRequest -Uri "https://storage.googleapis.com/github-release-files-storage/latest/windows-installer-latest.exe" -OutFile "windows-installer-latest.exe"
# Verify the certificate
openssl verify -verbose -CAfile code_ca_bundle_cert.pem code_sign_cert.pem
REM sign
# Sign the installer
openssl smime -sign -in windows-installer-latest.exe -out windows-installer-latest.signed.exe -inkey code_sign_private_key.pem -signer code_sign_cert.pem -outform DER -nodetach


# - name: Sign installer
# run: |
# REM download the installer from the given URL
# curl -L -o windows-installer-latest.exe https://storage.googleapis.com/github-release-files-storage/latest/windows-installer-latest.exe

# REM verify
# openssl verify -verbose -CAfile code_ca_bundle_cert.pem code_sign_cert.pem

# REM sign
# openssl smime -sign -in windows-installer-latest.exe -out windows-installer-latest.signed.exe -inkey code_sign_private_key.pem -signer code_sign_cert.pem -outform DER -nodetach


# - name: Write multiline secret to txt file
# shell: pwsh
# run: |
Expand Down

0 comments on commit 1269b20

Please sign in to comment.