lexactivator-dotnet/code-sign.ps1 at main · cryptlex/lexactivator-dotnet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# code-sign.ps1
# =============================================================================
# CODE SIGNING SCRIPT - Uses Jsign with Google Cloud KMS
# Usage: .\code-sign.ps1 -SignType "dll|nupkg"
# =============================================================================
param(
    [Parameter(Mandatory=$true)]
    [ValidateSet("dll", "nupkg")]
    [string]$SignType
)

# =============================================================================
# SETUP
# =============================================================================

Write-Host "Downloading Jsign..."
$jsignUrl = "https://github.com/ebourg/jsign/releases/download/7.0/jsign-7.0.jar"
Invoke-WebRequest -Uri $jsignUrl -OutFile "jsign.jar" -UseBasicParsing

# Common parameters
$keystore = "projects/cryptlex-sdks/locations/us/keyRings/code-signing"
$alias = "code-signing-key-2025-28/cryptoKeyVersions/1"
$accessToken = gcloud auth print-access-token

# =============================================================================
# SIGN DLLs
# =============================================================================

if ($SignType -eq "dll") {
    Write-Host "Signing DLLs..."

    Get-ChildItem -Path ".\src\Cryptlex.LexActivator\bin\Release\" -Filter "*.dll" -Recurse -File | ForEach-Object {
        Write-Host "Signing: $($_.Name)"
        java -jar jsign.jar --storetype GOOGLECLOUD --keystore $keystore --storepass $accessToken --alias $alias --certfile "certs/code-signing-cert.crt" --tsaurl http://timestamp.sectigo.com --alg SHA-256 $_.FullName
        if ($LASTEXITCODE -ne 0) { exit 1 }
    }
}

# =============================================================================
# SIGN NUGET PACKAGES
# =============================================================================

if ($SignType -eq "nupkg") {
    Write-Host "Signing NuGet packages..."

    Get-ChildItem -Path ".\nupkg\" -Filter "*.nupkg" -File | ForEach-Object {
        Write-Host "Signing: $($_.Name)"
        java -jar jsign.jar --storetype GOOGLECLOUD --keystore $keystore --storepass $accessToken --alias $alias --certfile "certs/code-signing-cert.crt" --tsaurl http://timestamp.sectigo.com --alg SHA-256 $_.FullName
        if ($LASTEXITCODE -ne 0) { exit 1 }
    }
}

Write-Host "Code signing completed successfully!"