From 572505ddeb9b0e43dabd0f08924cbfc643993df7 Mon Sep 17 00:00:00 2001
From: Damian Minkov <damencho@jitsi.org>
Date: Tue, 18 Dec 2012 16:03:01 +0000
Subject: [PATCH] Moves signing application before creating the initial dmg
 image in order to keep the signing information, as it is not saved later when
 we modify the image.

---
 resources/install/build.xml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/resources/install/build.xml b/resources/install/build.xml
index 43f3d8318..1dc7c4721 100644
--- a/resources/install/build.xml
+++ b/resources/install/build.xml
@@ -1320,6 +1320,9 @@
       available languages, so macosx can switch languages -->
       <antcall target="dmg-create-language-folders" />
 
+      <!-- sign before creating the image, so the signed app goes into it -->
+      <antcall target="macosx-sign-app"/>
+
       <!-- Create a temporary Disk Image -->
       <exec executable="/usr/bin/hdiutil" os="Mac OS X" failonerror="true">
         <arg value="create"/>
@@ -1358,8 +1361,6 @@
       <!-- Add a symbolic link to the Applications directory -->
       <symlink link="${release}/${application.name}" resource="/Applications"/>
 
-      <antcall target="macosx-sign-app"/>
-
       <!-- Detach the temporary image -->
       <exec executable="/usr/bin/hdiutil" os="Mac OS X" failonerror="true">
         <arg value="detach"/>
@@ -1412,6 +1413,13 @@
             <arg value="${macosx.app.dir}/${application.name}.app"/>
         </exec>
 
+        <!-- just print sign info
+            To test is sign accepted do $ sudo spctl -a -v -->
+        <exec executable="/usr/bin/codesign" os="Mac OS X" failonerror="true">
+            <arg value="-dvvv"/>
+            <arg value="${macosx.app.dir}/${application.name}.app"/>
+        </exec>
+
         <!-- locking again -->
         <exec executable="/usr/bin/security" os="Mac OS X" failonerror="true">
             <arg value="lock-keychain"/>