org.openbakery.codesign.Codesign.groovy Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of xcode-plugin Show documentation
Show all versions of xcode-plugin Show documentation
XCode-Plugin is a plugin to allow custom XCode projects to build as generated by CMake
package org.openbakery.codesign
import org.apache.commons.io.FilenameUtils
import org.apache.commons.lang.StringUtils
import org.openbakery.CommandRunner
import org.openbakery.configuration.Configuration
import org.openbakery.configuration.ConfigurationFromMap
import org.openbakery.configuration.ConfigurationFromPlist
import org.openbakery.util.PlistHelper
import org.openbakery.xcode.Type
import org.openbakery.xcode.Xcode
import org.slf4j.Logger
import org.slf4j.LoggerFactory
class Codesign {
private static Logger logger = LoggerFactory.getLogger(Codesign.class)
CodesignParameters codesignParameters
private CommandRunner commandRunner
PlistHelper plistHelper
Xcode xcode
Codesign(Xcode xcode, CodesignParameters codesignParameters, CommandRunner commandRunner, PlistHelper plistHelper) {
this.xcode = xcode
this.commandRunner = commandRunner
this.plistHelper = plistHelper
this.codesignParameters = codesignParameters
}
void sign(File bundle) {
logger.debug("Codesign with Identity: {}", codesignParameters.signingIdentity)
codeSignFrameworks(bundle)
logger.debug("Codesign {}", bundle)
File entitlements = null
if (codesignParameters.signingIdentity != null) {
entitlements = prepareEntitlementsForSigning(bundle)
}
performCodesign(bundle, entitlements)
}
private File prepareEntitlementsForSigning(File bundle) {
File entitlements = codesignParameters.entitlementsFile
logger.debug("prepareEntitlementsForSigning")
if (entitlements != null) {
if (!entitlements.exists()) {
throw new IllegalArgumentException("given entitlements file does not exist: " + entitlements)
}
logger.info("Using given entitlements {}", entitlements)
} else {
logger.debug("createEntitlementsFile no entitlementsFile specified")
Configuration configuration
if (codesignParameters.entitlements != null) {
logger.info("Merging entitlements from the codesign parameters")
configuration = new ConfigurationFromMap(codesignParameters.entitlements)
} else {
File xcentFile = getXcentFile(bundle)
if (xcentFile != null) {
logger.debug("Merging entitlements from the xcent file found in the archive")
configuration = new ConfigurationFromPlist(xcentFile)
}
}
if (configuration == null) {
logger.debug("No entitlements configuration found for mergeing, so use only the plain entitlements extracted from the provisioning profile")
configuration = new ConfigurationFromMap([:])
}
String bundleIdentifier = getIdentifierForBundle(bundle)
entitlements = createEntitlementsFile(bundleIdentifier, configuration)
if (entitlements != null) {
logger.info("Using entitlements extracted from the provisioning profile")
}
}
return entitlements
}
private void codeSignFrameworks(File bundle) {
File frameworksDirectory
if (codesignParameters.type == Type.iOS) {
frameworksDirectory = new File(bundle, "Frameworks")
} else {
frameworksDirectory = new File(bundle, "Contents/Frameworks")
}
logger.info("looking for framework at: " + frameworksDirectory.absolutePath)
if (frameworksDirectory.exists()) {
FilenameFilter filter = new FilenameFilter() {
boolean accept(File dir, String name) {
return !name.toLowerCase().endsWith(".plist")
}
}
for (File file in frameworksDirectory.listFiles(filter)) {
logger.info("trying to code sign a framework")
performCodesign(file, null)
}
}
}
private void performCodesign(File bundle, File entitlements) {
if (codesignParameters.signingIdentity == null) {
performCodesignWithoutIdentity(bundle)
} else {
performCodesignWithIdentity(bundle,entitlements)
}
}
private void performCodesignWithIdentity(File bundle, File entitlements) {
logger.info("performCodesign {}", bundle)
def codesignCommand = []
codesignCommand << "/usr/bin/codesign"
codesignCommand << "--force"
if (entitlements != null) {
codesignCommand << "--entitlements"
codesignCommand << entitlements.absolutePath
}
codesignCommand << "--sign"
codesignCommand << codesignParameters.signingIdentity
codesignCommand << "--verbose"
codesignCommand << bundle.absolutePath
codesignCommand << "--keychain"
codesignCommand << codesignParameters.keychain.absolutePath
def environment = ["DEVELOPER_DIR": xcode.getPath() + "/Contents/Developer/"]
commandRunner.run(codesignCommand, environment)
}
private void performCodesignWithoutIdentity(File bundle) {
logger.info("performCodesign {}", bundle)
def codesignCommand = []
codesignCommand << "/usr/bin/codesign"
codesignCommand << "--force"
codesignCommand << "--sign"
codesignCommand << "-"
codesignCommand << "--verbose"
codesignCommand << bundle.absolutePath
def environment = ["DEVELOPER_DIR": xcode.getPath() + "/Contents/Developer/"]
commandRunner.run(codesignCommand, environment)
}
private String getIdentifierForBundle(File bundle) {
File infoPlist
if (codesignParameters.type == Type.iOS) {
infoPlist = new File(bundle, "Info.plist");
} else {
infoPlist = new File(bundle, "Contents/Info.plist")
}
String bundleIdentifier = plistHelper.getValueFromPlist(infoPlist, "CFBundleIdentifier")
return bundleIdentifier
}
File createEntitlementsFile(String bundleIdentifier, Configuration configuration) {
// the settings from the xcent file are merge with the settings from entitlements from the provisioning profile
if (bundleIdentifier == null) {
logger.debug("not bundleIdentifier specified")
return null
}
logger.debug("createEntitlementsFile for identifier {}", bundleIdentifier)
File provisionFile = ProvisioningProfileReader.getProvisionFileForIdentifier(bundleIdentifier, codesignParameters.mobileProvisionFiles, this.commandRunner, this.plistHelper)
if (provisionFile == null) {
if (codesignParameters.type == Type.iOS) {
throw new IllegalStateException("No provisioning profile found for bundle identifier: " + bundleIdentifier)
}
// on OS X this is valid
return null
}
// set keychain access group
List keychainAccessGroup = getKeychainAccessGroupFromEntitlements(configuration)
ProvisioningProfileReader reader = new ProvisioningProfileReader(provisionFile, this.commandRunner, this.plistHelper)
String basename = FilenameUtils.getBaseName(provisionFile.path)
File tmpDir = new File(System.getProperty("java.io.tmpdir"))
File extractedEntitlementsFile = new File(tmpDir, "entitlements_" + basename + ".plist")
reader.extractEntitlements(extractedEntitlementsFile, bundleIdentifier, keychainAccessGroup, configuration)
extractedEntitlementsFile.deleteOnExit()
return extractedEntitlementsFile
}
File getXcentFile(File bundle) {
def fileList = bundle.list(
[accept: { d, f -> f ==~ /.*xcent/ }] as FilenameFilter
)
if (fileList == null || fileList.toList().isEmpty()) {
return null
}
File result = new File(bundle, fileList.toList().get(0))
if (result.exists()) {
logger.debug("Found xcent file in the archive: {}", result)
return result
}
return null
}
List getKeychainAccessGroupFromEntitlements(Configuration configuration) {
List result = []
String applicationIdentifier = configuration.getString("application-identifier")
if (StringUtils.isNotEmpty(applicationIdentifier)) {
applicationIdentifier = applicationIdentifier.split("\\.")[0] + "."
}
List keychainAccessGroups = configuration.getStringArray("keychain-access-groups")
keychainAccessGroups.each { item ->
if (StringUtils.isNotEmpty(applicationIdentifier) && item.startsWith(applicationIdentifier)) {
result << item.replace(applicationIdentifier, ProvisioningProfileReader.APPLICATION_IDENTIFIER_PREFIX)
} else {
result << item
}
}
return result
}
}