Skip to content

Commit

Permalink
update
Browse files Browse the repository at this point in the history
  • Loading branch information
sondresolbakken committed Aug 4, 2023
1 parent 01e611b commit 80dde5f
Showing 1 changed file with 8 additions and 7 deletions.
15 changes: 8 additions & 7 deletions .github/workflows/digicert-signing-linux.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -53,20 +53,20 @@ jobs:
echo "PKCS11_CONFIG=/tmp/DigiCert One Signing Manager Tools/smtools-linux-x64/pkcs11properties.cfg" >> "$GITHUB_ENV"
shell: bash

- name: Sign with osslcodesign
- name: Working version of signing with osslcodesign
env:
GITHUB_WORKSPACE: ${{ github.workspace }}
run: |
smctl cert save --keypair-alias="key_464138416" --name "cert.pem" --out "${{ env.GITHUB_WORKSPACE }}"
osslsigncode sign -v -pkcs11engine "/usr/lib/x86_64-linux-gnu/engines-1.1/libpkcs11.so" -pkcs11module "/tmp/DigiCert One Signing Manager Tools/smtools-linux-x64/smpkcs11.so" -certs /home/runner/work/code-sign-action/code-sign-action/cert.pem -key 'pkcs11:object=key_464138416;type=private' -in "test.dll" -out "signed-test.dll" -h sha256 -t http://timestamp.digicert.com
shell: bash

# - name: Working version of signing with smctl Jsign
# env:
# GITHUB_WORKSPACE: ${{ github.workspace }}
# run: |
# smctl sign -v --keypair-alias="key_464138416" --config-file="/tmp/DigiCert One Signing Manager Tools/smtools-linux-x64/pkcs11properties.cfg" --fingerprint "${{ secrets.CODE_SIGNING_CERT_SHA1_HASH }}" --input "test.dll"
# shell: bash
- name: Working version of signing with smctl Jsign
env:
GITHUB_WORKSPACE: ${{ github.workspace }}
run: |
smctl sign -v --keypair-alias="key_464138416" --config-file="/tmp/DigiCert One Signing Manager Tools/smtools-linux-x64/pkcs11properties.cfg" --fingerprint "${{ secrets.CODE_SIGNING_CERT_SHA1_HASH }}" --input "test.dll"
shell: bash

# I think this works
# jsign --keystore "/tmp/DigiCert One Signing Manager Tools/smtools-linux-x64/pkcs11properties.cfg" --storepass NONE --storetype PKCS11 --alias key_464138416 test.dll
Expand All @@ -84,4 +84,5 @@ jobs:
GITHUB_WORKSPACE: ${{ github.workspace }}
run: |
osslsigncode verify -in "signed-test.dll"
osslsigncode verify -in "test.dll"
shell: bash

0 comments on commit 80dde5f

Please sign in to comment.