Hi all,
this is only a first rough idea:
- previously we signed the exe files for the Windows installer and
uninstaller by first generating a temporary installer. Then running that
(on Windows or with wine) so that it writes our the uninstaller. Then
sign the uninstaller and generate the final installer and finally sign
the final installer.
The "problematic" step is running the temporary installer, because it is
an exe and is the only step needing Windows or wine.
- currently we use a callback inside the NSIS script which calls signing
functionality via ant calls during the generation of the uninstaller and
installer. Here we have a problem with wine, because running ant in wine
seems to be complex and needs additional dependencies (JVM).
The rough idea is: switch back to a multi step build, first generate the
uninstaller, sign it, then generate the real installer an sign it. But
avoid the need to run the temporary installer. How? NSIS does not have
an explicit statement to write our the uninstaller, but the uninstaller
callback "!uninstfinalize" we currently use to sign the uninstaller gets
the path to a temporary file containing the uninstaller as "%1". So
instead of calling ant to sign the file, we could:
- run nsis such that it gets to "!uninstfinalize" and instead of
calling ant to sign, try to copy the file "%1" to ${tomcat.dist}.
- sign the file
- now run nsis to generate the final installer including that signed
uninstaller
- sign the uninstaller
The incomplete part is the "copy the file" step. This copy needs to be
multi platform (working on Windows, wine and when using makensis". But
the nsis file, that needs to contain the appropriate copy command is run
through a replacement filter anyways, so we can select the right copy
command string before (depending on the case Windows, wine or makensis)
before and patch it into the nsis file used.
Sorry, just a bit more than a vague idea, but not complete yet :(
I will not find time today to go deeper into it, but maybe it helps
nevertheless, because at least for Chris and maybe other future RM the
wine way still seems to be the most attractive.
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
