Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Notarized darwin Builds #92

Closed
michaelquigley opened this issue Nov 9, 2022 · 4 comments
Closed

Notarized darwin Builds #92

michaelquigley opened this issue Nov 9, 2022 · 4 comments
Assignees
@michaelquigley
Labels
spike Requires R&D; figure it out
Milestone
v0.3

Comments

@michaelquigley
Copy link
Collaborator

The current darwin builds are signed, but not notarized. Notarize them.
@michaelquigley michaelquigley self-assigned this Nov 9, 2022
@michaelquigley michaelquigley added the spike Requires R&D; figure it out label Nov 9, 2022
@michaelquigley michaelquigley added this to the v0.3 milestone Nov 9, 2022
@michaelquigley
Copy link
Collaborator Author

How to cross compile with CGO using GoReleaser and GitHub Actions
https://www.bytebase.com/blog/how-to-cross-compile-with-cgo-use-goreleaser-and-github-action

@michaelquigley
Copy link
Collaborator Author

michaelquigley commented Nov 18, 2022 •
edited
Loading

Creating a certificate for signing (not sure about notarizing) using LibreSSL on Ubuntu:

  1. From the Apple Developer Center, generate a new "Apple Distribution" certificate.

  2. You'll need a CSR, generate using OpenSSL (did not work with OpenSSL 3.0.5 on Ubuntu; installed LibreSSL 3.3.6, which worked correctly):

openssl req -newkey rsa:2048 -keyout distribution.key -out distribution.csr
  1. Convert .cer file to a .pem file:
openssl x509 -in distribution.cer -inform DER -out distribution.pem -outform PEM
  1. Convert .pem to .p12:
openssl pkcs12 -export -inkey distribution.key -in distribution.pem -out distribution.p12

(modified version of: https://gist.github.com/boodle/77436b2d9facb8e938ad)

@michaelquigley
Copy link
Collaborator Author

https://github.com/kencochrane/golang-github-action-sign-macos/blob/master/.github/workflows/release.yml

@michaelquigley
Copy link
Collaborator Author

https://www.kencochrane.com/2020/08/01/build-and-sign-golang-binaries-for-macos-with-github-actions/

@michaelquigley michaelquigley moved this from Backlog to Development in zrok Development Roadmap Jan 19, 2023
@michaelquigley michaelquigley moved this from Development to Evaluating in zrok Development Roadmap Jan 26, 2023
@github-project-automation github-project-automation bot moved this from Evaluating to Done in zrok Development Roadmap Jan 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@michaelquigley michaelquigley

Labels
spike Requires R&D; figure it out
Projects
zrok Development Roadmap
Status: Done
Milestone
v0.3
Development

No branches or pull requests
2 participants
@michaelquigley @camotts