diff --git a/.gitattributes b/.gitattributes index 3754bf3595..59597f670d 100644 --- a/.gitattributes +++ b/.gitattributes @@ -1,3 +1,4 @@ *.sql text eol=lf app/win/zotero.exe.tar.xz filter=lfs diff=lfs merge=lfs -text app/mac/updater.tar.xz filter=lfs diff=lfs merge=lfs -text +app/win/updater.exe.tar.xz filter=lfs diff=lfs merge=lfs -text diff --git a/app/build.sh b/app/build.sh index bb8bb3b862..759396019a 100755 --- a/app/build.sh +++ b/app/build.sh @@ -638,21 +638,6 @@ if [ $BUILD_WIN == 1 ]; then perl -pi -e "s/\{\{VERSION}}/$VERSION/" "$BUILD_DIR/win_installer/defines.nsi" mkdir "$COMMON_APPDIR/uninstall" - # Use our own updater, because Mozilla's requires updates signed by Mozilla - cp "$CALLDIR/win/updater.exe" "$COMMON_APPDIR" - cat "$CALLDIR/win/installer/updater_append.ini" >> "$COMMON_APPDIR/updater.ini" - - # Sign updater - if [ $SIGN -eq 1 ]; then - "`cygpath -u \"$SIGNTOOL\"`" \ - sign /n "$SIGNTOOL_CERT_SUBJECT" \ - /d "$SIGNATURE_DESC Updater" \ - /fd SHA256 \ - /tr "$SIGNTOOL_TIMESTAMP_SERVER" \ - /td SHA256 \ - "`cygpath -w \"$COMMON_APPDIR/updater.exe\"`" - fi - # Compress 7zSD.sfx upx --best -o "`cygpath -w \"$BUILD_DIR/7zSD.sfx\"`" \ "`cygpath -w \"$CALLDIR/win/installer/7zstub/firefox/7zSD.sfx\"`" > /dev/null @@ -690,6 +675,21 @@ if [ $BUILD_WIN == 1 ]; then --set-product-version "$VERSION" fi + # Use our own updater, because Mozilla's requires updates signed by Mozilla + tar xf "$CALLDIR/win/updater.exe.tar.xz" --to-stdout updater-$arch.exe > "$APPDIR/updater.exe" + cat "$CALLDIR/win/installer/updater_append.ini" >> "$APPDIR/updater.ini" + + # Sign updater + if [ $SIGN -eq 1 ]; then + "`cygpath -u \"$SIGNTOOL\"`" \ + sign /n "$SIGNTOOL_CERT_SUBJECT" \ + /d "$SIGNATURE_DESC Updater" \ + /fd SHA256 \ + /tr "$SIGNTOOL_TIMESTAMP_SERVER" \ + /td SHA256 \ + "`cygpath -w \"$APPDIR/updater.exe\"`" + fi + # Copy app files rsync -a "$base_dir/" "$APPDIR/" #mv "$APPDIR/app/application.ini" "$APPDIR/" diff --git a/app/win/mozconfig b/app/win/mozconfig index 5028a3f008..5f138b328f 100644 --- a/app/win/mozconfig +++ b/app/win/mozconfig @@ -24,3 +24,6 @@ ac_add_options --enable-official-branding export MOZILLA_OFFICIAL=1 export RELEASE_OR_BETA=1 MOZ_REQUIRE_SIGNING= + +# Build updater without MAR signature verification +ac_add_options --disable-verify-mar diff --git a/app/win/updater.exe b/app/win/updater.exe deleted file mode 100644 index db9cc6664f..0000000000 Binary files a/app/win/updater.exe and /dev/null differ diff --git a/app/win/updater.exe.tar.xz b/app/win/updater.exe.tar.xz new file mode 100644 index 0000000000..6f8c75a89b --- /dev/null +++ b/app/win/updater.exe.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:23186030edd8b75f4de3d1ed50632cd20f38c55e6bcb693abd1e9d5e5428d878 +size 258844