From: Martin v. Löwis <martin@v.loewis.de>
Date: Fri, 13 Feb 2009 20:51:48 +0000 (+0000)
Subject: Add optional code signing after merging.
X-Git-Tag: v2.7a1~2029
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=7e28b9c565ebfeb7ce829a1cf607213f738df07e;p=python

Add optional code signing after merging.
---

diff --git a/Tools/msi/merge.py b/Tools/msi/merge.py
index 959978be44..def3964799 100644
--- a/Tools/msi/merge.py
+++ b/Tools/msi/merge.py
@@ -1,5 +1,6 @@
 import msilib,os,win32com,tempfile,sys
 PCBUILD="PCBuild"
+certname = None
 from config import *
 
 Win64 = "amd64" in PCBUILD
@@ -76,3 +77,8 @@ def merge(msi, feature, rootdir, modules):
     db.Commit()
 
 merge(msi, "SharedCRT", "TARGETDIR", modules)
+
+# certname (from config.py) should be (a substring of)
+# the certificate subject, e.g. "Python Software Foundation"
+if certname:
+    os.system('signtool sign /n "%s" /t http://timestamp.verisign.com/scripts/timestamp.dll %s' % (certname, msi))