[Chromoting] Sign the installer package.

remoting/host/installer/mac/do_signing.sh

 #!/bin/sh
 
 # Copyright (c) 2012 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This script signs the Chromoting binaries, builds the Chrome Remote Desktop
 # installer and then packages it into a .dmg.  It requires that Iceberg be
 # installed (for 'freeze').
 #
@@ skipping 10 matching lines @@
 # 'true' to use Iceberg, 'false' to use Packages.
 # TODO(garykac) Switch completely to Packages so we can sign for 10.8.
 # (crbug.com/127267)
 USE_ICEBERG=false
 
 declare -a g_cleanup_dirs
 
 # Binaries to sign.
 ME2ME_HOST='PrivilegedHelperTools/org.chromium.chromoting.me2me_host.app'
 UNINSTALLER='Applications/@@HOST_UNINSTALLER_NAME@@.app'
+PREFPANE='PreferencePanes/org.chromium.chromoting.prefPane'
 
 # The Chromoting Host installer is a meta-package that consists of 3
 # components:
 #  * Chromoting Host Service package
 #  * Chromoting Host Uninstaller package
 #  * Keystone package (GoogleSoftwareUpdate - for Official builds only)
 if $USE_ICEBERG ; then
   PKGPROJ_HOST='ChromotingHost.packproj'
   PKGPROJ_HOST_SERVICE='ChromotingHostService.packproj'
   PKGPROJ_HOST_UNINSTALLER='ChromotingHostUninstaller.packproj'
+
+  # Final (user-visible) mpkg name.
+  PKG_FINAL='@@HOST_PKG@@.mpkg'
 else
   PKGPROJ_HOST='ChromotingHost.pkgproj'
   PKGPROJ_HOST_SERVICE='ChromotingHostService.pkgproj'
   PKGPROJ_HOST_UNINSTALLER='ChromotingHostUninstaller.pkgproj'
+
+  # Final (user-visible) pkg name.
+  PKG_FINAL='@@HOST_PKG@@.pkg'
 fi
 
-# Final (user-visible) mpkg name.
-PKG_FINAL='@@HOST_PKG@@.mpkg'
-
 DMG_VOLUME_NAME='@@DMG_VOLUME_NAME@@'
 DMG_FILE_NAME='@@DMG_FILE_NAME@@.dmg'
 
 # Temp directory for Iceberg output.
 PKG_DIR=build
 g_cleanup_dirs+=("${PKG_DIR}")
 
 # Temp directories for building the dmg.
 DMG_TEMP_DIR="$(mktemp -d -t "${ME}"-dmg)"
 g_cleanup_dirs+=("${DMG_TEMP_DIR}")
@@ skipping 48 matching lines @@
   codesign -v "${name}"
 }
 
 sign_binaries() {
   local input_dir="${1}"
   local keychain="${2}"
   local id="${3}"
 
   sign "${input_dir}/${ME2ME_HOST}" "${keychain}" "${id}"
   sign "${input_dir}/${UNINSTALLER}" "${keychain}" "${id}"
+  sign "${input_dir}/${PREFPANE}" "${keychain}" "${id}"
+}
+
+sign_installer() {
+  local input_dir="${1}"
+  local keychain="${2}"
+  local id="${3}"
+
+  sign "${input_dir}/${PKG_DIR}/${PKG_FINAL}" "${keychain}" "${id}"
 }
 
 build_package() {
   local pkg="${1}"
   echo "Building .pkg from ${pkg}"
   if $USE_ICEBERG ; then
     freeze "${pkg}"
   else
     packagesbuild -v "${pkg}"
   fi
@@ skipping 39 matching lines @@
 main() {
   local output_dir="$(shell_safe_path "${1}")"
   local input_dir="$(shell_safe_path "${2}")"
   local codesign_keychain="$(shell_safe_path "${3}")"
   local codesign_id="${4}"
 
   verify_clean_dir "${output_dir}"
 
   sign_binaries "${input_dir}" "${codesign_keychain}" "${codesign_id}"
   build_packages "${input_dir}"
-  # TODO(garykac): Sign final .mpkg once we've switched to Packages.
-  # (crbug.com/127267)
+  sign_installer "${input_dir}" "${codesign_keychain}" "${codesign_id}"
   build_dmg "${input_dir}" "${output_dir}"
 
   cleanup
 }
 
 if [[ ${#} -ne 4 ]]; then
   usage
   exit 1
 fi
 
 main "${@}"
 exit ${?}