Skip to content

Conversation

@kpalang
Copy link
Contributor

@kpalang kpalang commented Apr 1, 2025

I have added the some properties to control how the build is signed.

  • To disable signing altogether the disableSigning property should be set to true. This can be done by appending -DdisableSigning=true to the ant command
  • To sign with the bundled self-signed certificate, no additional properties need to be set
  • To sign with a CA signing certificate, append -Dcert=ca and Dkeystore_property_file=/path/to/keystore.properties

CA certificate signing options are highly specific to one's CA. I've customized the current setup to work with BrightCodeCompany's certificate, as it will be used for the first couple OIE releases.

Closes #11 #16

Copy link
Member

@tonygermano tonygermano left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not making this a requirement to merge, but I'd like to see:

  1. an issue opened for the signing changes to build.xml
  2. the PR squashed to 2 commits, one for each issue
  3. the singing usage in this PR description added to the body of the commit message for the changes to build.xml
  4. a brief summary of the design of the github action, including the answer to my question about the two build steps, added to the body of the commit message for the addition of that file.

uses: actions/upload-artifact@v4
with:
name: oie-build
path: openintegrationengine.tar.gz No newline at end of file
Copy link
Member

@tonygermano tonygermano Apr 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

missing a newline at the end of the file

kpalang added 2 commits April 3, 2025 22:43
Signed-off-by: Kaur Palang <kaur.palang@brightcodecompany.com>
…ertificate

- To disable signing altogether the `disableSigning` property should be set to `true`. This can be done by appending `-DdisableSigning=true` to the `ant` command
- To sign with the bundled self-signed certificate, no additional properties need to be set
- To sign with a CA signing certificate, append `-Dcert=ca` and `Dkeystore_property_file=/path/to/keystore.properties`

Signed-off-by: Kaur Palang <kaur.palang@brightcodecompany.com>
@kpalang kpalang force-pushed the feature/#11_add-build-workflows branch from 38e7118 to 2dc47fe Compare April 3, 2025 19:44
Copy link
Member

@tonygermano tonygermano left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Thanks for putting in the requested changes.

@tonygermano tonygermano linked an issue Apr 4, 2025 that may be closed by this pull request
@kpalang
Copy link
Contributor Author

kpalang commented Apr 5, 2025

@jonbartels I need your review here, too.

@kpalang kpalang merged commit 9adf3f3 into main Apr 8, 2025
2 checks passed
@kpalang kpalang deleted the feature/#11_add-build-workflows branch April 8, 2025 10:33
@tonygermano tonygermano added this to the Next Release milestone Apr 28, 2025
@jonbartels jonbartels mentioned this pull request May 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Build Automation - RFC Make codesigning optional

4 participants