|
1 | 1 | <Project>
|
2 | 2 | <PropertyGroup>
|
3 |
| - <!-- |
4 |
| - Windows arm/arm64 jobs don't have MSIs to sign. Keep it simple: allow not finding any matches |
5 |
| - here and rely on overall signing validation. |
6 |
| - --> |
7 |
| - <AllowEmptySignList Condition="'$(SignFinalPackages)' != 'true'">true</AllowEmptySignList> |
8 | 3 | <UseDotNetCertificate>true</UseDotNetCertificate>
|
9 | 4 | </PropertyGroup>
|
10 | 5 |
|
11 |
| - <ItemGroup> |
12 |
| - <FileExtensionSignInfo Update=".nupkg" CertificateName="NuGet" /> |
13 |
| - <FileExtensionSignInfo Update=".zip" CertificateName="None" /> |
14 |
| - <FileExtensionSignInfo Include=".msi" CertificateName="MicrosoftDotNet500" /> |
15 |
| - </ItemGroup> |
16 |
| - |
17 |
| - <!-- <ItemGroup> |
18 |
| - <!-- |
19 |
| - Replace the default items to sign with the specific set we want. |
20 |
| - --> |
21 |
| - <ItemsToSign Remove="@(ItemsToSign)" /> |
22 |
| - <ItemsToSignPostBuild Remove="@(ItemsToSignPostBuild)" /> |
| 6 | + <ItemGroup Label="Third Party Assemblies"> |
| 7 | + <FileSignInfo Include="GMap.NET.Core.dll" CertificateName="3PartySHA2" /> |
| 8 | + <FileSignInfo Include="GMap.NET.GTK.dll" CertificateName="3PartySHA2" /> |
| 9 | + <FileSignInfo Include="webkit-sharp.dll" CertificateName="3PartySHA2" /> |
| 10 | + <FileSignInfo Include="Mono.Cecil.dll" CertificateName="3PartySHA2" /> |
| 11 | + <FileSignInfo Include="Mono.Cecil.Mdb.dll" CertificateName="3PartySHA2" /> |
| 12 | + <FileSignInfo Include="Mono.Cecil.Pdb.dll" CertificateName="3PartySHA2" /> |
| 13 | + <FileSignInfo Include="Mono.Cecil.Rocks.dll" CertificateName="3PartySHA2" /> |
| 14 | + <FileSignInfo Include="Svg.Skia.dll" CertificateName="3PartySHA2" /> |
| 15 | + <FileSignInfo Include="Svg.Custom.dll" CertificateName="3PartySHA2" /> |
| 16 | + <FileSignInfo Include="Svg.Model.dll" CertificateName="3PartySHA2" /> |
| 17 | + <FileSignInfo Include="ShimSkiaSharp.dll" CertificateName="3PartySHA2" /> |
| 18 | + <FileSignInfo Include="Fizzler.dll" CertificateName="3PartySHA2" /> |
| 19 | + <FileSignInfo Include="ExCSS.dll" CertificateName="3PartySHA2" /> |
| 20 | + <FileSignInfo Include="Newtonsoft.Json.dll" CertificateName="3PartySHA2" /> |
23 | 21 |
|
24 |
| - <!-- apphost and comhost template files are not signed, by design. --> |
25 |
| - <FileSignInfo Include="apphost.exe;comhost.dll" CertificateName="None" /> |
26 |
| - |
27 |
| - <FileExtensionSignInfo Include=".msi" CertificateName="MicrosoftDotNet500" /> |
28 |
| - <FileExtensionSignInfo Include=".pkg" CertificateName="8003" /> |
29 |
| - <FileExtensionSignInfo Include=".deb;.rpm" CertificateName="LinuxSign" /> |
| 22 | + <FileSignInfo Include="OpenSans-Regular.ttf" CertificateName="3PartySHA2" /> |
| 23 | + <FileSignInfo Include="OpenSans-Semibold.ttf" CertificateName="3PartySHA2" /> |
30 | 24 | </ItemGroup>
|
31 | 25 |
|
32 |
| - <!-- This repo signs everything, including installers, either right before doing the PushToAzureDevOpsArtifacts, |
33 |
| - or in post-build. Populate what will get signed the same in both cases --> |
34 |
| - <ItemGroup Condition="'$(PrepareArtifacts)' == 'true'"> |
35 |
| - <ItemsToSignWithPaths Include="$(DownloadDirectory)**/*.msi" /> |
36 |
| - <ItemsToSignWithPaths Include="$(DownloadDirectory)**/*.exe" /> |
37 |
| - <ItemsToSignWithPaths Include="$(DownloadDirectory)**/*.nupkg" /> |
38 |
| - <ItemsToSignWithPaths Include="$(DownloadDirectory)**/*.zip" /> |
39 |
| - |
40 |
| - <ItemsToSignWithoutPaths Include="@(ItemsToSignWithPaths->'%(Filename)%(Extension)')" /> |
41 |
| - <ItemsToSignPostBuild Include="@(ItemsToSignWithoutPaths->Distinct())" Condition="'$(PostBuildSign)' == 'true'" /> |
42 |
| - <ItemsToSign Include="@(ItemsToSignWithPaths->Distinct())" Condition="'$(PostBuildSign)' != 'true'" /> |
43 |
| - </ItemGroup> --> |
44 | 26 | </Project>
|
0 commit comments