This is an automated email from the ASF dual-hosted git repository.
ardovm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/openoffice-devtools.git
The following commit(s) were added to refs/heads/main by this push:
new c995fe0 New release script: windows-sign.sh
c995fe0 is described below
commit c995fe0d4bc1ede44c0ec11177bc355764b2238c
Author: Arrigo Marchiori <[email protected]>
AuthorDate: Mon Oct 12 23:00:10 2026 +0200
New release script: windows-sign.sh
Uses jsign to sign all EXE files in and under the current directory.
---
release-scripts/windows-sign.sh | 43 +++++++++++++++++++++++++++++++++++++++++
1 file changed, 43 insertions(+)
diff --git a/release-scripts/windows-sign.sh b/release-scripts/windows-sign.sh
new file mode 100755
index 0000000..9f9672f
--- /dev/null
+++ b/release-scripts/windows-sign.sh
@@ -0,0 +1,43 @@
+#!/bin/sh
+#
+# windows-sign.sh : sign all EXE files in the current directory and its
+# subdirectories using jsign
+#
+# jsign must be available as a command; install the .deb or .rpm file of the
+# latest version, obtained from the GitHub repository:
+# https://github.com/ebourg/jsign/
+#
+# You must have your SSL.com account and you must have obtained your own
+# signing credentials. This script requires:
+# - your SSL.com username;
+# - your SSL.com password;
+# - your secret code to the ASF code signing certificate.
+#
+# After running this script, the EXE files are changed and must be re-hashed
+# and re-signed with the developer's PGP key.
+
+have_jsign=1
+which jsign > /dev/null || have_jsign=0
+if [ $have_jsign = 0 ]; then
+ echo "ERROR: jsign was not found. Download it from
https://github.com/ebourg/jsign/"; 1>&2
+ exit 1
+fi
+
+printf "Enter SSL.com username: "
+read username
+printf "Enter SSL.com password: "
+read password
+printf "Enter SSL.com secret code: "
+read code
+
+allfiles=`find . -type f -name '*.exe' -print`
+count=0
+for file in ${allfiles}; do
+ jsign --storetype ESIGNER --alias d97c5110-c66a-4c0c-ac0c-1cd6af812ee6 \
+ --storepass "${username}|${password}" --keypass "${code}" \
+ --tsaurl="http://ts.ssl.com"; --tsmode RFC3161 --alg SHA256 \
+ $file || exit 1
+ count=$(( $count + 1 ))
+done
+
+echo "$count files signed. Now it's time to run hash-sign.sh -f"
