From eb754f305193a9b1a3eee68bc2dc5263c1a44f54 Mon Sep 17 00:00:00 2001
From: Kaur Palang <kaur.palang@brightcodecompany.com>
Date: Wed, 2 Apr 2025 00:17:50 +0300
Subject: [PATCH 1/2] #11 Add build workflow

Signed-off-by: Kaur Palang <kaur.palang@brightcodecompany.com>
---
 .github/workflows/build.yaml | 42 ++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 .github/workflows/build.yaml

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
new file mode 100644
index 0000000000..486e29f119
--- /dev/null
+++ b/.github/workflows/build.yaml
@@ -0,0 +1,42 @@
+name: Build OpenIntegrationEngine
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          java-version: '8'
+          java-package: 'jdk+fx'
+          distribution: 'zulu'
+
+      - name: Build OIE (signed)
+        if: github.ref == 'refs/heads/main'
+        working-directory: server
+        run: ant -f mirth-build.xml
+
+      - name: Build OIE (unsigned)
+        if: github.ref != 'refs/heads/main'
+        working-directory: server
+        run: ant -f mirth-build.xml -DdisableSigning=true
+
+      - name: Package distribution
+        run: tar czf openintegrationengine.tar.gz -C server/ setup --transform 's|^setup|openintegrationengine/|'
+
+      - name: Create artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: oie-build
+          path: openintegrationengine.tar.gz

From 2dc47fed40daf67d6046ff0eec9cf9e1f23ff3f5 Mon Sep 17 00:00:00 2001
From: Kaur Palang <kaur.palang@brightcodecompany.com>
Date: Wed, 2 Apr 2025 14:42:03 +0300
Subject: [PATCH 2/2] #16 Add options to choose either a self-signed or
 CA-signed signing certificate

- To disable signing altogether the `disableSigning` property should be set to `true`. This can be done by appending `-DdisableSigning=true` to the `ant` command
- To sign with the bundled self-signed certificate, no additional properties need to be set
- To sign with a CA signing certificate, append `-Dcert=ca` and `Dkeystore_property_file=/path/to/keystore.properties`

Signed-off-by: Kaur Palang <kaur.palang@brightcodecompany.com>
---
 server/build.xml | 91 +++++++++++++++++++++++++++++++++++++++---------
 1 file changed, 74 insertions(+), 17 deletions(-)

diff --git a/server/build.xml b/server/build.xml
index 5ab74227e4..839952a185 100644
--- a/server/build.xml
+++ b/server/build.xml
@@ -1062,23 +1062,80 @@
 			</sequential>
 		</for>
 
-		<!-- sign jars for webstart -->
-		<echo message="[Thread Count: ${signjar_thread_count}] Signing jars for Java Web Start" />
-		<property file="${keystore_property_file}" />
-		
-		<for param="jarFile" parallel="true" threadCount="${signjar_thread_count}">
-			<fileset dir="${setup.client.lib}" includes="**/*.jar" />
-			<fileset dir="${setup.extensions}" includes="**/*.jar" />
-			<sequential>
-				<retry retrycount="5" retrydelay="1000">
-					<signjar jar="@{jarFile}" alias="${key.alias}" keystore="${key.keystore}" storepass="${key.storepass}" keypass="${key.keypass}" storetype="${key.storetype}" tsaurl="http://timestamp.digicert.com" digestalg="SHA-256">
-						<!-- http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7127374 -->
-						<sysproperty key="jsse.enableSNIExtension" value="false" />
-						<sysproperty key="https.protocols" value="TLSv1.2,TLSv1.1" />
-					</signjar>
-				</retry>
-			</sequential>
-		</for>
+
+		<if>
+			<equals arg1="${disableSigning}" arg2="true" />
+
+			<then>
+				<echo message="Signing jars for Java Web Start is disabled" />
+			</then>
+
+			<else>
+				<property file="${keystore_property_file}" />
+				<property name="signingTsa" value="http://timestamp.digicert.com" />
+
+				<echo message="[Thread Count: ${signjar_thread_count}] Signing jars for Java Web Start" />
+
+				<if>
+					<equals arg1="${cert}" arg2="ca" />
+
+					<!-- Sign jars with valid CA certificate -->
+					<then>
+						<echo message="Signing with CA certificate" />
+
+						<for param="jarFile" parallel="true" threadCount="${signjar_thread_count}">
+							<fileset dir="${setup.client.lib}" includes="**/*.jar" />
+							<fileset dir="${setup.extensions}" includes="**/*.jar" />
+							<sequential>
+								<retry retrycount="5" retrydelay="1000">
+									<signjar
+											jar="@{jarFile}"
+											alias="${key.alias}"
+											storepass="${key.storepass}"
+											storetype="${key.storetype}"
+											providerclass="${key.providerclass}"
+											providerarg="${key.providerarg}"
+											tsaurl="${signingTsa}"
+									>
+										<!-- http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7127374 -->
+										<sysproperty key="jsse.enableSNIExtension" value="false" />
+										<sysproperty key="https.protocols" value="TLSv1.2,TLSv1.1" />
+									</signjar>
+								</retry>
+							</sequential>
+						</for>
+					</then>
+
+					<!-- Sign jars with self-signed certificate -->
+					<else>
+						<echo message="Signing with self-signed certificate" />
+
+						<for param="jarFile" parallel="true" threadCount="${signjar_thread_count}">
+							<fileset dir="${setup.client.lib}" includes="**/*.jar" />
+							<fileset dir="${setup.extensions}" includes="**/*.jar" />
+							<sequential>
+								<retry retrycount="5" retrydelay="1000">
+									<signjar
+											jar="@{jarFile}"
+											alias="${key.alias}"
+											keystore="${key.keystore}"
+											storepass="${key.storepass}"
+											keypass="${key.keypass}"
+											storetype="${key.storetype}"
+											tsaurl="${signingTsa}"
+											digestalg="SHA-256"
+									>
+										<!-- http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7127374 -->
+										<sysproperty key="jsse.enableSNIExtension" value="false" />
+										<sysproperty key="https.protocols" value="TLSv1.2,TLSv1.1" />
+									</signjar>
+								</retry>
+							</sequential>
+						</for>
+					</else>
+				</if>
+			</else>
+		</if>
 	</target>
 
 	<target name="create-extension-zips" depends="create-setup">