[NETBEANS-2132] Sign NBMs bundled in ZIP distribution

DalavanCloud · Mar 12, 2019 · 0a04bcc · 0a04bcc
1 parent 2e513f5
commit 0a04bcc
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/nb/updatecenters/build.xml b/nb/updatecenters/build.xml
@@ -26,11 +26,38 @@
 
   <target name="compile" depends="projectized-common.compile,javafx-nbms"/>
 
-  <target name="javafx-nbms" description="Prepare NBMs for 3rd party libraries" depends="init">
+  <target name="javafx-nbms" description="Prepare NBMs for 3rd party libraries" depends="projectized-common.compile">
+      <tempfile destdir="${build.dir}" prefix="sign" suffix=".ks" property="netbeans.bundled.ks" deleteonexit="true" />
+      <tempfile destdir="${build.dir}" prefix="sign" suffix=".cert" property="netbeans.bundled.cert" deleteonexit="true"/>
+      <genkey
+        keystore="${netbeans.bundled.ks}"
+        alias="netbeans-bundled" storepass="${netbeans.bundled.ks}"
+        dname="CN=Ant Group, OU=NetBeans, O=Apache.org, C=US"
+      />
       <subant  target="nbm" inheritall="false">
           <property name="build.dir" location="build/3rdparty-nbms"/>
+          <property name="keystore" location="${netbeans.bundled.ks}"/>
+          <property name="storepass" value="${netbeans.bundled.ks}"/>
+          <property name="nbm_alias" value="netbeans-bundled"/>
           <fileset dir="${nb_all}/extra" includes="libs.javafx.*/build.xml"/>
       </subant>
+      <exec executable="${java.home}/bin/keytool" failonerror="true">
+          <arg value="-exportcert"/>
+          <arg line="-keystore ${netbeans.bundled.ks}"/>
+          <arg line="-alias netbeans-bundled"/>
+          <arg line="-storepass ${netbeans.bundled.ks}"/>
+          <arg line="-file ${netbeans.bundled.cert}"/>
+      </exec>
+      <copy overwrite="true" file="ide.ks" tofile="${build.dir}/ide.ks"/>
+      <exec executable="${java.home}/bin/keytool" failonerror="true">
+          <arg value="-importcert"/>
+          <arg value="-noprompt"/>
+          <arg line="-keystore ${build.dir}/ide.ks"/>
+          <arg line="-storepass open4all"/>
+          <arg line="-file ${netbeans.bundled.cert}"/>
+      </exec>
+      <delete file="${netbeans.bundled.ks}"/>
+      <delete file="${netbeans.bundled.cert}"/>
       <taskdef name="makeupdatedesc" classname="org.netbeans.nbbuild.MakeUpdateDesc"
                classpath="${nbantext.jar}"/>
 

diff --git a/nb/updatecenters/release/core/ide.ks → nb/updatecenters/ide.ks b/nb/updatecenters/release/core/ide.ks → nb/updatecenters/ide.ks
diff --git a/nb/updatecenters/nbproject/project.properties b/nb/updatecenters/nbproject/project.properties
@@ -18,3 +18,5 @@
 is.eager=true
 javac.compilerargs=-Xlint:unchecked
 javac.source=1.6
+
+release.build/ide.ks=core/ide.ks