From f5a30ecb337094cec688be72f29cd739be9ef050 Mon Sep 17 00:00:00 2001 From: David Sparer Date: Tue, 21 Mar 2017 11:42:50 -0600 Subject: [PATCH] added some more support for excluding files from signing --- Tools/postbuild_mremotev1.ps1 | 7 +++++-- Tools/sign_binaries.ps1 | 6 ++++++ 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/Tools/postbuild_mremotev1.ps1 b/Tools/postbuild_mremotev1.ps1 index 3b2b5bd86..5fdf50646 100644 --- a/Tools/postbuild_mremotev1.ps1 +++ b/Tools/postbuild_mremotev1.ps1 @@ -19,7 +19,10 @@ param ( $CertificatePath, [string] - $CertificatePassword + $CertificatePassword, + + [string[]] + $ExcludeFromSigning ) Write-Output "+=================================================================+" @@ -38,6 +41,6 @@ Format-Table -AutoSize -Wrap -InputObject @{ & "$PSScriptRoot\move_help_files.ps1" -TargetDir $TargetDir & "$PSScriptRoot\set_LargeAddressAware.ps1" -TargetDir $TargetDir -TargetFileName $TargetFileName & "$PSScriptRoot\tidy_files_for_release.ps1" -TargetDir $TargetDir -ConfigurationName $ConfigurationName -& "$PSScriptRoot\sign_binaries.ps1" -SolutionDir $SolutionDir -TargetDir $TargetDir -CertificatePath $CertificatePath -CertificatePassword $CertificatePassword -ConfigurationName $ConfigurationName +& "$PSScriptRoot\sign_binaries.ps1" -SolutionDir $SolutionDir -TargetDir $TargetDir -CertificatePath $CertificatePath -CertificatePassword $CertificatePassword -ConfigurationName $ConfigurationName -Exclude $ExcludeFromSigning & "$PSScriptRoot\verify_binary_signatures.ps1" -TargetDir $TargetDir -ConfigurationName $ConfigurationName & "$PSScriptRoot\zip_portable_files.ps1" -SolutionDir $SolutionDir -TargetDir $TargetDir -ConfigurationName $ConfigurationName \ No newline at end of file diff --git a/Tools/sign_binaries.ps1 b/Tools/sign_binaries.ps1 index 1c872cd3b..ac2ec1123 100644 --- a/Tools/sign_binaries.ps1 +++ b/Tools/sign_binaries.ps1 @@ -57,8 +57,14 @@ try { Write-Output "Signing Binaries" Write-Output "Getting files from path: $TargetDir" $signableFiles = Get-ChildItem -Path $TargetDir -Recurse | ?{$_.Extension -match "dll|exe|msi"} | ?{$Exclude -notcontains $_.Name} + +$excluded_files = Get-ChildItem -Path $TargetDir -Recurse | ?{$_.Extension -match "dll|exe|msi"} | ?{$Exclude -contains $_.Name} +Write-Output "The following files were excluded from signing due to being on the exclusion list:" +$excluded_files | %{Write-Output $_.FullName} + Write-Output "Signable files count: $($signableFiles.Count)" + foreach ($file in $signableFiles) { Set-AuthenticodeSignature -Certificate $cert -TimestampServer $timeserver -IncludeChain all -FilePath $file.FullName }