15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#!/bin/bash -p 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Copyright (c) 2012 The Chromium Authors. All rights reserved. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Use of this source code is governed by a BSD-style license that can be 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# found in the LICENSE file. 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Using codesign, sign the application. After signing, the signatures on the 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# inner bundle components are verified, and the application's own signature is 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# verified. Inner bundle components are expected to be signed before this 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# script is called. See sign_versioned_dir.sh. 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)set -eu 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Environment sanitization. Set a known-safe PATH. Clear environment variables 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# that might impact the interpreter's operation. The |bash -p| invocation 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# on the #! line takes the bite out of BASH_ENV, ENV, and SHELLOPTS (among 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# other features), but clearing them here ensures that they won't impact any 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# shell scripts used as utility programs. SHELLOPTS is read-only and can't be 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# unset, only unexported. 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)export PATH="/usr/bin:/bin:/usr/sbin:/sbin" 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)unset BASH_ENV CDPATH ENV GLOBIGNORE IFS POSIXLY_CORRECT 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)export -n SHELLOPTS 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)ME="$(basename "${0}")" 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)readonly ME 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)if [[ ${#} -ne 3 ]]; then 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) echo "usage: ${ME} app_path codesign_keychain codesign_id" >& 2 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) exit 1 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)fi 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)app_path="${1}" 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)codesign_keychain="${2}" 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)codesign_id="${3}" 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Use custom resource rules for the browser application. 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)script_dir="$(dirname "${0}")" 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)browser_app_rules="${script_dir}/app_resource_rules.plist" 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)versioned_dir="${app_path}/Contents/Versions/@VERSION@" 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)browser_app="${app_path}" 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)framework="${versioned_dir}/@MAC_PRODUCT_NAME@ Framework.framework" 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)helper_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper.app" 455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)helper_eh_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper EH.app" 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)helper_np_app="${versioned_dir}/@MAC_PRODUCT_NAME@ Helper NP.app" 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)requirement_string="\ 495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)designated => \ 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)(identifier \"com.google.Chrome\" or identifier \"com.google.Chrome.canary\") \ 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)and certificate leaf = H\"85cee8254216185620ddc8851c7a9fc4dfe120ef\"\ 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)" 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 541675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --sign "${codesign_id}" --keychain "${codesign_keychain}" \ 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) "${browser_app}" --resource-rules "${browser_app_rules}" \ 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) -r="${requirement_string}" 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 581675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# Show the signature. 591675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --display -r- -vvvvvv "${browser_app}" 601675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)# Verify everything. Check the framework and helper apps to make sure that the 621675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# signatures are present and weren't altered by the signing process. Don't use 631675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# --deep on the framework because Keystone's signature is in a transitional 641675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# state (radar 18474911). Use --no-strict on the app because it uses custom 651675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# resource rules. 661675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --verify -vvvvvv "${framework}" 671675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --verify --deep -vvvvvv "${helper_app}" 681675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --verify --deep -vvvvvv "${helper_eh_app}" 691675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --verify --deep -vvvvvv "${helper_np_app}" 701675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochcodesign --verify --deep --no-strict -vvvvvv "${browser_app}" 711675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch 721675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# Verify with spctl, which uses the same rules that Gatekeeper does for 731675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdoch# validation. 741675a649fd7a8b3cb80ffddae2dc181f122353c5Ben Murdochspctl --assess -vv "${browser_app}" 75