Merge pull request #27 from Microsoft/fix-pkg-sign

Fix macOS installer package file signing
git-ecosystem · Mar 19, 2019 · 3ad6ec1 · 3ad6ec1
2 parents 0c5f913 + b895f29
commit 3ad6ec1
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/.azure-pipelines/templates/osx/pack.signed/step4-signpack.yml b/.azure-pipelines/templates/osx/pack.signed/step4-signpack.yml
@@ -11,13 +11,25 @@ steps:
       artifactName: 'tmp.macpkg_unsigned'
       downloadPath: '$(Build.StagingDirectory)\pkg'
 
+  - powershell: |
+      $dir="$(Build.StagingDirectory)\pkg"
+      Compress-Archive -Path $dir\*.pkg $dir\gcmcorepkg.zip
+      Remove-Item $dir\*.pkg
+    displayName: 'Zip package file for signing'
+
   - task: ms-vseng.MicroBuildTasks.7973a23b-33e3-4b00-a7d9-c06d90f8297f.MicroBuildSignMacFiles@1
     displayName: Sign package
     inputs:
-      SigningTarget: '$(Build.StagingDirectory)\pkg'
+      SigningTarget: '$(Build.StagingDirectory)\pkg\gcmcorepkg.zip'
       SigningCert: 8003
     condition: and(succeeded(), ne(variables['SignType'], 'test'))
 
+  - powershell: |
+      $dir="$(Build.StagingDirectory)\pkg"
+      Expand-Archive -LiteralPath $dir\gcmcorepkg.zip -DestinationPath $dir -Force
+      Remove-Item $dir\gcmcorepkg.zip -Force
+    displayName: 'Unzip signed package file'
+
   - task: DownloadPipelineArtifact@1
     displayName: Download signed payload
     inputs: