90 lines
3.3 KiB
Python
90 lines
3.3 KiB
Python
|
import os, os.path, sys, csv, re, fnmatch, shutil, zipfile, pprint
|
||
|
|
from optparse import OptionParser
|
||
|
|
from zipfile import ZipFile
|
||
|
|
from subprocess import Popen, PIPE, STDOUT
|
||
|
|
|
||
|
|
if __name__ == '__main__':
|
||
|
|
parser = OptionParser()
|
||
|
|
parser.add_option('-j', '--jar', action='store', dest='jar', help='Jar to sign', default=None)
|
||
|
|
parser.add_option('-c', '--command', action='store', dest='command', help='Path to jar signer command, will be invoked on temp jar to sign', default=None)
|
||
|
|
parser.add_option('-a', '--alias', action='store', dest='alias', help='Optional: The keystore alias to use when siging the jar, it will be passed in as para 2 to the command', default='')
|
||
|
|
#This is kept as a seperate file so that if you integrate this into a build system, you are not publically displaying any private passwords
|
||
|
|
#Typically the format of this file will be:
|
||
|
|
#
|
||
|
|
#jarsigner -keystore my_key_store -storepass key_store_pass -keypass key_pass %1 alias
|
||
|
|
|
||
|
|
#The rest of the parameters are used as regxs to determine what parts of the file will be signed, a file will be signed if it matches ANY of the regexs
|
||
|
|
options, args = parser.parse_args()
|
||
|
|
|
||
|
|
if options.jar is None:
|
||
|
|
print 'You must supply the jar to sign using --jar <jar>'
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
if options.command is None:
|
||
|
|
print 'You must supply a command to be called using --command <command>, See the comments in the python for details on this'
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
if not os.path.isfile(options.jar):
|
||
|
|
print 'The specified jar "%s" could not be found' % options.jar
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
regs = []
|
||
|
|
for reg in args:
|
||
|
|
regs.append(re.compile(reg))
|
||
|
|
|
||
|
|
shutil.copy(options.jar, options.jar + '.bak')
|
||
|
|
tmp_1 = options.jar + '.tmp1'
|
||
|
|
tmp_2 = options.jar + '.tmp2'
|
||
|
|
|
||
|
|
zip_in = ZipFile(options.jar, mode='r')
|
||
|
|
zip_tmp_1 = ZipFile(tmp_1, mode='w')
|
||
|
|
zip_tmp_2 = ZipFile(tmp_2, mode='w')
|
||
|
|
for i in zip_in.filelist:
|
||
|
|
matched = False
|
||
|
|
for reg in regs:
|
||
|
|
if not reg.match(i.filename) is None:
|
||
|
|
matched = True
|
||
|
|
break
|
||
|
|
|
||
|
|
data = zip_in.read(i.filename)
|
||
|
|
if matched:
|
||
|
|
print 'Matched: ' + i.filename
|
||
|
|
zip_tmp_1.writestr(i, data)
|
||
|
|
else:
|
||
|
|
if i.filename.startswith('META-INF'):
|
||
|
|
print 'Detected skipped META-INF File, it will not be copied to new jar, if you wish to keep this data, include it in the signed info: %s' % i.filename
|
||
|
|
else:
|
||
|
|
print 'Skipped: ' + i.filename
|
||
|
|
zip_tmp_2.writestr(i, data)
|
||
|
|
|
||
|
|
zip_in.close()
|
||
|
|
zip_tmp_1.close()
|
||
|
|
zip_tmp_2.close()
|
||
|
|
|
||
|
|
try:
|
||
|
|
process = Popen([options.command, os.path.abspath(tmp_1), options.alias], stdout=PIPE, stderr=STDOUT, bufsize=-1)
|
||
|
|
out, _ = process.communicate()
|
||
|
|
print out
|
||
|
|
except OSError as e:
|
||
|
|
print "Error creating signed tmp jar: %s" % e.strerror
|
||
|
|
sys.exit(1)
|
||
|
|
|
||
|
|
os.remove(options.jar)
|
||
|
|
|
||
|
|
zip_out = ZipFile(options.jar, mode='w')
|
||
|
|
|
||
|
|
for tmp in [tmp_1, tmp_2]:
|
||
|
|
zip_in = ZipFile(tmp, mode='r')
|
||
|
|
|
||
|
|
for i in zip_in.filelist:
|
||
|
|
zip_out.writestr(i, zip_in.read(i.filename))
|
||
|
|
|
||
|
|
zip_in.close()
|
||
|
|
|
||
|
|
zip_out.close()
|
||
|
|
|
||
|
|
os.remove(tmp_1)
|
||
|
|
os.remove(tmp_2)
|
||
|
|
|
||
|
|
print 'Signing jar complete'
|
||
|
|
|