Simon Rozman
5293dfc1a7
This adds support for Microsoft Azure Trusted Signing and removes signing of the Debug binaries to minimize the Trusted Signing API volume. Signed-off-by: Simon Rozman <simon@rozman.si>
39 lines
2.5 KiB
XML
39 lines
2.5 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!--
|
|
SPDX-License-Identifier: GPL-3.0-or-later
|
|
Copyright © 2016-2022 Amebis
|
|
Copyright © 2016 GÉANT
|
|
-->
|
|
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
|
<ImportGroup Label="PropertySheets" />
|
|
<ItemDefinitionGroup>
|
|
<ClCompile>
|
|
<Optimization>Full</Optimization>
|
|
<InlineFunctionExpansion>AnySuitable</InlineFunctionExpansion>
|
|
<IntrinsicFunctions>true</IntrinsicFunctions>
|
|
<FavorSizeOrSpeed>Speed</FavorSizeOrSpeed>
|
|
<OmitFramePointers>true</OmitFramePointers>
|
|
<EnableFiberSafeOptimizations>true</EnableFiberSafeOptimizations>
|
|
<PreprocessorDefinitions>NDEBUG;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
|
<RuntimeLibrary>MultiThreaded</RuntimeLibrary>
|
|
<BasicRuntimeChecks>Default</BasicRuntimeChecks>
|
|
<FunctionLevelLinking>true</FunctionLevelLinking>
|
|
</ClCompile>
|
|
<Link>
|
|
<EnableCOMDATFolding>true</EnableCOMDATFolding>
|
|
</Link>
|
|
<ResourceCompile>
|
|
<PreprocessorDefinitions>NDEBUG;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
|
</ResourceCompile>
|
|
</ItemDefinitionGroup>
|
|
<Target Name="SignLocal" Condition="('$(ConfigurationType)' == 'Application' or '$(ConfigurationType)' == 'DynamicLibrary') and '$(ManifestCertificateThumbprint)' != ''"
|
|
AfterTargets="_Manifest" BeforeTargets="RegisterOutput" Inputs="$(OutDir)$(TargetName)$(TargetExt)" Outputs="$(IntDir)$(TargetName).sign">
|
|
<Exec Command="signtool.exe sign /sha1 "$(ManifestCertificateThumbprint)" /fd SHA256 /tr "$(ManifestTimestampRFC3161Url)" /td SHA256 /q "$(TargetPath)"" />
|
|
<Touch Files="$(IntDir)$(TargetName).sign" AlwaysCreate="true" />
|
|
</Target>
|
|
<Target Name="SignAzure" Condition="('$(ConfigurationType)' == 'Application' or '$(ConfigurationType)' == 'DynamicLibrary') and exists('$(APPDATA)\Microsoft.Trusted.Signing.Client.json')"
|
|
AfterTargets="_Manifest" BeforeTargets="RegisterOutput" Inputs="$(OutDir)$(TargetName)$(TargetExt)" Outputs="$(IntDir)$(TargetName).sign">
|
|
<Exec Command="signtool.exe sign /dlib "$(USERPROFILE)\.nuget\packages\microsoft.trusted.signing.client\1.0.53\bin\$(PreferredToolArchitecture)\Azure.CodeSigning.Dlib.dll" /dmdf "$(APPDATA)\Microsoft.Trusted.Signing.Client.json" /fd SHA256 /tr "http://timestamp.acs.microsoft.com" /td SHA256 /q "$(TargetPath)"" />
|
|
<Touch Files="$(IntDir)$(TargetName).sign" AlwaysCreate="true" />
|
|
</Target>
|
|
</Project> |