From 5fd95471791842234a1840477c55ba175fff5a8c Mon Sep 17 00:00:00 2001
From: Bdale Garbee <bdale@gag.com>
Date: Fri, 28 Oct 2022 22:20:03 -0600
Subject: [PATCH] fat: sign Windows installers with our new code signing
 certificate

---
 altosui/Makefile.am   | 6 ++++++
 micropeak/Makefile.am | 6 ++++++
 telegps/Makefile.am   | 6 ++++++
 3 files changed, 18 insertions(+)

diff --git a/altosui/Makefile.am b/altosui/Makefile.am
index 19bcb913..c2df5de7 100644
--- a/altosui/Makefile.am
+++ b/altosui/Makefile.am
@@ -1,3 +1,5 @@
+# location of code signing key, et al
+CODEKEYDIR=~/altusmetrumllc/ssl.com
 
 JAVAROOT=classes
 AM_JAVACFLAGS=$(JAVAC_VERSION_FLAGS) -encoding UTF-8 -Xlint:deprecation -Xlint:unchecked
@@ -411,3 +413,7 @@ $(MACOSX_DIST): $(MACOSX_FILES) $(MACOSX_EXTRA) Makefile
 $(WINDOWS_DIST): $(WINDOWS_FILES) altos-windows.nsi Instdrv/NSIS/Includes/java.nsh
 	-rm -f $@
 	makensis -Oaltos-windows.log "-XOutFile $@" "-DVERSION=$(VERSION)" altos-windows.nsi || (cat altos-windows.log && exit 1)
+	jsign --keystore $(CODEKEYDIR)/altus_metrum,_llc.p12 --alias 1 \
+		--storetype PKCS12 --storepass `cat $(CODEKEYDIR)/password` \
+		--tsaurl http://ts.ssl.com --tsmode RFC3161 $@
+
diff --git a/micropeak/Makefile.am b/micropeak/Makefile.am
index 09cf9617..017f5348 100644
--- a/micropeak/Makefile.am
+++ b/micropeak/Makefile.am
@@ -1,3 +1,6 @@
+# location of code signing key, et al
+CODEKEYDIR=~/altusmetrumllc/ssl.com
+ 
 JAVAROOT=classes
 AM_JAVACFLAGS=$(JAVAC_VERSION_FLAGS) -encoding UTF-8 -Xlint:deprecation -Xlint:unchecked
 
@@ -345,6 +348,9 @@ $(MACOSX_DIST): $(MACOSX_FILES)
 $(WINDOWS_DIST): $(WINDOWS_FILES) micropeak-windows.nsi
 	-rm -f $@
 	makensis -Omicropeak-windows.log "-XOutFile $@" "-DVERSION=$(VERSION)" micropeak-windows.nsi || (cat micropeak-windows.log && exit 1)
+	jsign --keystore $(CODEKEYDIR)/altus_metrum,_llc.p12 --alias 1 \
+		--storetype PKCS12 --storepass `cat $(CODEKEYDIR)/password` \
+		--tsaurl http://ts.ssl.com --tsmode RFC3161 $@
 
 Manifest.txt: Makefile
 	echo 'Main-Class: org.altusmetrum.micropeak.MicroPeak' > $@
diff --git a/telegps/Makefile.am b/telegps/Makefile.am
index 7ab0749c..067df0c7 100644
--- a/telegps/Makefile.am
+++ b/telegps/Makefile.am
@@ -1,3 +1,6 @@
+# location of code signing key, et al
+CODEKEYDIR=~/altusmetrumllc/ssl.com
+ 
 JAVAROOT=classes
 AM_JAVACFLAGS=$(JAVAC_VERSION_FLAGS) -encoding UTF-8 -Xlint:deprecation -Xlint:unchecked
 
@@ -337,6 +340,9 @@ $(MACOSX_DIST): $(MACOSX_FILES) $(MACOSX_EXTRA) Makefile
 $(WINDOWS_DIST): $(WINDOWS_FILES) telegps-windows.nsi
 	-rm -f $@
 	makensis -Otelegps-windows.log "-XOutFile $@" "-DVERSION=$(VERSION)" telegps-windows.nsi || (cat telegps-windows.log && exit 1)
+	jsign --keystore $(CODEKEYDIR)/altus_metrum,_llc.p12 --alias 1 \
+		--storetype PKCS12 --storepass `cat $(CODEKEYDIR)/password` \
+		--tsaurl http://ts.ssl.com --tsmode RFC3161 $@
 
 Manifest.txt: Makefile
 	echo 'Main-Class: org.altusmetrum.telegps.TeleGPS' > $@
-- 
2.30.2