Easy Signing

compiling/gdx-jnigen-gradle/src/main/java/com/badlogic/gdx/jnigen/gradle/JnigenExtension.java

@@ -75,6 +75,8 @@ public class JnigenExtension {
 
     Action<RobovmBuildConfig> robovm;
 	JnigenBindingGeneratorExtension generator;
+	JnigenSigningExtension signing;
+    DefaultTask signAllTask;
 
     @Inject
     public JnigenExtension (Project project) {
@@ -96,6 +98,17 @@ public void nativeCodeGenerator (Action<NativeCodeGeneratorConfig> container) {
         container.execute(nativeCodeGeneratorConfig);
     }
 
+    public void signing (Action<JnigenSigningExtension> container) {
+        if (signing != null)
+            throw new IllegalStateException("signing already configured");
+        signing = new JnigenSigningExtension();
+        container.execute(signing);
+
+        signAllTask = project.getTasks().create("jnigenSignAll", DefaultTask.class);
+        signAllTask.setGroup("jnigen");
+        signAllTask.setDescription("Signs all signable native libraries");
+    }
+
     public void all (Action<BuildTarget> container) {
         this.all = container;
     }
@@ -258,6 +271,16 @@ private void checkForTasksToAdd (BuildTarget target) {
             jnigenBuildTask.setBuildTarget(target);
             jnigenBuildTask.dependsOn(jnigenTask);
 
+            if (signing != null) {
+                if (os == Windows && signing.getJsignParams() != null
+                        || (os == MacOsX || os == IOS) && signing.getIdentity() != null) {
+                    JnigenSignTask jnigenSignTask = project.getTasks().create("jnigenSign" + os.name() + "_" + architecture.getDisplayName() + bitness.name(), JnigenSignTask.class, this);
+                    jnigenSignTask.setBuildTarget(target);
+                    jnigenSignTask.dependsOn(jnigenBuildTask);
+                    signAllTask.dependsOn(jnigenSignTask);
+                }
+            }
+
             platformLevelTargetsSeen.get(platform).mustRunAfter(jnigenBuildTask);
             if (HostDetection.os == os && HostDetection.architecture == architecture && HostDetection.bitness == bitness) {
                 DefaultTask hostTask = project.getTasks().create("jnigenBuildHost", DefaultTask.class);

compiling/gdx-jnigen-gradle/src/main/java/com/badlogic/gdx/jnigen/gradle/JnigenSignTask.java

@@ -0,0 +1,88 @@
+package com.badlogic.gdx.jnigen.gradle;
+
+import com.badlogic.gdx.jnigen.BuildConfig;
+import com.badlogic.gdx.jnigen.BuildTarget;
+import com.badlogic.gdx.jnigen.FileDescriptor;
+import com.badlogic.gdx.jnigen.build.RuntimeEnv;
+import com.badlogic.gdx.jnigen.build.ToolFinder;
+import com.badlogic.gdx.jnigen.build.ToolchainExecutor;
+import groovy.lang.Closure;
+import org.gradle.api.DefaultTask;
+import org.gradle.api.tasks.TaskAction;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import javax.inject.Inject;
+import java.io.File;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+public class JnigenSignTask extends DefaultTask {
+
+
+	private static final Logger log = LoggerFactory.getLogger(JnigenSignTask.class);
+
+	private final JnigenExtension ext;
+
+	private BuildTarget buildTarget;
+
+	@Inject
+	public JnigenSignTask(JnigenExtension ext) {
+		this.ext = ext;
+
+		setGroup("jnigen");
+		setDescription("Signs native libraries");
+	}
+
+	public void setBuildTarget (BuildTarget buildTarget) {
+		this.buildTarget = buildTarget;
+	}
+
+	@TaskAction
+	public void run() {
+		BuildConfig buildConfig = new BuildConfig(ext.sharedLibName, ext.subProjectDir + ext.temporaryDir, ext.subProjectDir + ext.libsDir, ext.subProjectDir + ext.jniDir, null, new FileDescriptor(ext.subProjectDir));
+		RuntimeEnv env = new RuntimeEnv();
+		List<String> args = new ArrayList<>();
+		switch (buildTarget.os) {
+			case Windows:
+				Map<String, String> params = ext.signing.getJsignParams();
+				params.put("file", buildTarget.getTargetBinaryFile(buildConfig).getPath());
+				Closure<?> jsign = (Closure<?>) ext.project.getExtensions().getByName("jsign");
+				jsign.call(params);
+				break;
+			case MacOsX:
+			case IOS:
+				File codesign = ToolFinder.getToolFile("codesign", env, true);
+				args.add("-s");
+				args.add(ext.signing.getIdentity());
+				args.add("-f");
+				args.add(buildTarget.getTargetBinaryFile(buildConfig).getPath());
+				ToolchainExecutor.execute(codesign, getProject().getProjectDir(), args, new ToolchainExecutor.ToolchainCallback() {
+					@Override
+					public void onInfoMessage(String message) {
+						log.info(message);
+					}
+
+					@Override
+					public void onErrorMessage(String message) {
+						log.error(message);
+					}
+
+					@Override
+					public void onSuccess() {
+						log.info("Signing successful");
+					}
+
+					@Override
+					public void onFail(int statusCode) {
+						log.error("Signing failed with status code: {}", statusCode);
+					}
+				});
+				break;
+			default:
+				log.warn("Signing not supported for {}", buildTarget.os);
+				break;
+		}
+	}
+}

compiling/gdx-jnigen-gradle/src/main/java/com/badlogic/gdx/jnigen/gradle/JnigenSigningExtension.java

@@ -0,0 +1,24 @@
+package com.badlogic.gdx.jnigen.gradle;
+
+import java.util.Map;
+
+public class JnigenSigningExtension {
+	private Map<String, String> jsignParams;
+	private String identity;
+
+	public Map<String, String> getJsignParams() {
+		return jsignParams;
+	}
+
+	public void setJsignParams(Map<String, String> jsignParams) {
+		this.jsignParams = jsignParams;
+	}
+
+	public String getIdentity() {
+		return identity;
+	}
+
+	public void setIdentity(String identity) {
+		this.identity = identity;
+	}
+}

gdx-jnigen-generator-test/build.gradle

@@ -3,6 +3,7 @@ import com.badlogic.gdx.jnigen.commons.Os
 
 plugins {
     id "com.badlogicgames.jnigen.jnigen-gradle"
+    id 'net.jsign' version '6.0'
 }
 
 sourceCompatibility = 1.8
@@ -57,6 +58,18 @@ jnigen {
         options = ["-I" + file("src/test/resources/").absolutePath]
     }
 
+    signing {
+        jsignParams = [
+                name     : 'My Application',
+                url      : 'http://www.example.com',
+                keystore : 'keystore.p12',
+                alias    : 'test',
+                storepass: 'secret',
+                tsaurl   : 'http://timestamp.sectigo.com'
+        ]
+        identity = '-'
+    }
+
     addLinux(x32, ARM)
     addLinux(x64, x86)
     addLinux(x64, ARM)
@@ -83,4 +96,4 @@ eclipse {
     project {
         name = "gdx-jnigen-generator-test"
     }
-}
+}