Make invirt-update-vnc-cert sign the applet if a signing keystore is configured and...

diff --git a/debian/changelog b/debian/changelog
index a9a5d53..13bd68a 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,11 @@
-invirt-vnc-client (0.0.16) precise; urgency=medium
+invirt-vnc-client (0.0.17) precise; urgency=medium
+
+  * Make invirt-update-vnc-cert sign the vnc viewer applet if a signing
+    keystore is configured and present.
+
+ -- Adam Glasgall <glasgall@mit.edu>  Tue, 24 Jun 2014 22:52:00 -0400
+
+invirt-vnc-client (0.0.17) precise; urgency=medium
 
   * Revert previous Permissions: change and do it correctly via a patch
     instead of treating this as a native package.

diff --git a/debian/invirt-update-vnc-cert b/debian/invirt-update-vnc-cert
index 177c39a..869430f 100755 (executable)
--- a/debian/invirt-update-vnc-cert
+++ b/debian/invirt-update-vnc-cert
@@ -35,6 +35,13 @@ def main():
     check_call(['jar', 'uf', jarfile,
                 '-C', temp_dir, 'trust.store'])
 
+    if config.vnc.has_key("signing_keystore_path") \
+       and os.path.exists(config.vnc.signing_keystore_path):
+        check_call(['jarsigner', '-keystore', 
+                    config.vnc.signing_keystore_path, 
+                    '-storepass', 'changeit', jarfile, 
+                    config.vnc.signing_key_alias])
+
     shutil.move(jarfile, '/usr/share/invirt-vnc-client/VncViewer.jar')
     
     shutil.rmtree(temp_dir)