From 201096d7bf9d41a89118d33f1503169932edffbe Mon Sep 17 00:00:00 2001
From: DreamPiggy <lizhuoli1126@126.com>
Date: Tue, 7 May 2024 16:08:42 +0800
Subject: [PATCH] Added self-sign for XCFramework

The private key is only available during GitHub Action release pipeline
---
 .../SDWebImage Signing Certificate.cer        | Bin 0 -> 976 bytes
 .../SDWebImage Signing Certificate.pem        |   9 +++++
 SDWebImage.xcodeproj/project.pbxproj          |  19 +++++++++
 Scripts/build-frameworks.sh                   |   4 +-
 Scripts/create-xcframework.sh                 |   4 +-
 Scripts/sign-xcframework.sh                   |  36 ++++++++++++++++++
 6 files changed, 70 insertions(+), 2 deletions(-)
 create mode 100644 Certificate/SDWebImage Signing Certificate.cer
 create mode 100644 Certificate/SDWebImage Signing Certificate.pem
 create mode 100755 Scripts/sign-xcframework.sh

diff --git a/Certificate/SDWebImage Signing Certificate.cer b/Certificate/SDWebImage Signing Certificate.cer
new file mode 100644
index 0000000000000000000000000000000000000000..463f0982c5624419c2bd200ae3ce811b00568c20
GIT binary patch
literal 976
zcmXqLVm@Qg#I$7rGZP~d6C<MmFB_*;n@8JsUPeZ4RtAH{W<zxYRW{~O7G@r~V3+XJ
zB+uN$^i+l5%=Em>ymSTU)S{Biw9Mqhl2k)s13{2NE*>s~LPJ3VevlwH4@Yona%oX!
zNu?pT0Vha^O_(V(*ihL(5pE+VqnJoeW>rRMeom&Lp^=#b5bGu9=Nia~^BS2Lm>QTH
zm>V0KT1El6rbygD;>spQCFI~^WMyD(V&rEqXkz4IYGPz$*utVPNq%iyUA%w&%BVLp
z^*$Ncwe;nAnR0HcQ4ns(_|5ECy=dOwMq7T%^XW2u%@!_AwT8-G-;`CNi~Sshj93HD
zecZC>Ly6G7+?U%6T6%Q&FZF&X4?o8I`F~4s-;>k3JLV~E5PQ>b^zx+{A1}^$Am={u
za^I8_3Tk(ciQo2gczpKk(!f8>TTONPZq#lzdcCM$+2e&+(S^$w-8`4(gkGPdwycRo
zp+@PLvZeFEYkyewGi=;{ufcX+O+k!or5eYX?ZMmr9(^@abm>Pf-J_)%zGvqpo>0<Q
za?{B*NIhg;3g`R8J0gvx+q7P%9?8D%8^SqlxpL;c?tRm@c>e!qEcX5FigYGsMh3>k
zo(Ap)e8BjZ<!5C4&%(mY#NJ>a2I8xN_&f$&Y#iEbjI6Be%*+O|AaOnxF%}W?q=GrV
z)3=IbpV?rmur#Py`23$&$bk(^tH8i!WSF#C)*v)w<`TI=@g4C#9J2qDPiKmh=}xSO
z5W1Q+Pvm;a)hM;N64oWlSpuW0OnzLxlo)ccZ~vTQ9(P}|R14QuC_P%?T9Fj+-MIb2
z^`%;~-Dm2u7)|z`XSgV&-p!#Y?YLp>)CKyJ(x**u+nnCb{62H~qs$#b5&w(UN0=}5
zjM!bZ`r_WhuU-Ff3*_JSp5Df@wV)+%zS9%+65HMd3;Ax<PWzwMu}$c=;hIf1!%`A@
z*B)Y8+vB{;rS?LW>f}3L>X}Y2->5eI#Fe0xhjmMzTCMz5aCxC<iOQ7U$0KUW49!#0
n&PH}99W}pw^1fSq*uh;1im4xT{Ax?(eCmEF9RGYHNzNPq$)0Ap

literal 0
HcmV?d00001

diff --git a/Certificate/SDWebImage Signing Certificate.pem b/Certificate/SDWebImage Signing Certificate.pem
new file mode 100644
index 00000000..84e12cba
--- /dev/null
+++ b/Certificate/SDWebImage Signing Certificate.pem	
@@ -0,0 +1,9 @@
+-----BEGIN RSA PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAQgkh+tXn5fT3+pWuyZ
+LvIwPoSObko1CbZ8IBOAaPsDQXuinv2BPQ85z2ccjoM4RIJ9MSNK9iMkW3NOQRIy
+BVHO8bSi8HQSvm3pt3CEjCwP0o3wd1fGA/P/hHOO5Mu7iJ4isBbsgMXT0pjx0Zjg
+HkeR046UyCAm3cYX20lA483NpVH8g7U1LI7YfbMy66KPI0joFnLQ09FGSaVsVdeS
+JqaCBCB8IsYjOUPB1vwEvwCxv96APZ58cFwdeSYIzLdTtv3F6pkVpfEKLcV1KE3N
+nmHIIiik2UJFUidUnmQJ72HcFIF1tirrZcRr301UCZanI2nei76XtEn//jMW9+2o
+ZwIDAQAB
+-----END RSA PUBLIC KEY-----
diff --git a/SDWebImage.xcodeproj/project.pbxproj b/SDWebImage.xcodeproj/project.pbxproj
index 9a539d81..696c6138 100644
--- a/SDWebImage.xcodeproj/project.pbxproj
+++ b/SDWebImage.xcodeproj/project.pbxproj
@@ -13,6 +13,7 @@
 			buildPhases = (
 				326CA51322BA1A270033A92F /* Build Frameworks */,
 				326CA51422BA25F70033A92F /* Create XCFramework */,
+				32F4EC0E2BEA18C400EAADD2 /* Sign XCFramework */,
 			);
 			dependencies = (
 			);
@@ -1161,6 +1162,24 @@
 			shellPath = /bin/sh;
 			shellScript = "sh ${SRCROOT}/Scripts/create-xcframework.sh\n";
 		};
+		32F4EC0E2BEA18C400EAADD2 /* Sign XCFramework */ = {
+			isa = PBXShellScriptBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			inputFileListPaths = (
+			);
+			inputPaths = (
+			);
+			name = "Sign XCFramework";
+			outputFileListPaths = (
+			);
+			outputPaths = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+			shellPath = /bin/sh;
+			shellScript = "sh ${SRCROOT}/Scripts/sign-xcframework.sh\n";
+		};
 /* End PBXShellScriptBuildPhase section */
 
 /* Begin PBXSourcesBuildPhase section */
diff --git a/Scripts/build-frameworks.sh b/Scripts/build-frameworks.sh
index 82a7dd32..5fc7bbbc 100755
--- a/Scripts/build-frameworks.sh
+++ b/Scripts/build-frameworks.sh
@@ -5,6 +5,8 @@ set -o pipefail
 
 XCODE_VERSION=$(xcodebuild -version | head -n 1| awk -F ' ' '{print $2}')
 XCODE_VERSION_MAJOR=$(echo $XCODE_VERSION | awk -F '.' '{print $1}')
+XCODE_VERSION_MINOR=$(echo $XCODE_VERSION | awk -F '.' '{print $2}')
+XCODE_VERSION_PATCH=$(echo $XCODE_VERSION | awk -F '.' '{print $3}')
 if [ -z "$SRCROOT" ]
 then
     SRCROOT=$(pwd)
@@ -18,7 +20,7 @@ then
     PLATFORMS+=("macCatalyst")
 fi
 
-if [ $XCODE_VERSION_MAJOR -ge 15 ]
+if [[ ($XCODE_VERSION_MAJOR -gt 15) || ($XCODE_VERSION_MAJOR -eq 15 && $XCODE_VERSION_MINOR -ge 2) ]]
 then
     PLATFORMS+=("visionOS")
     PLATFORMS+=("visionOSSimulator")
diff --git a/Scripts/create-xcframework.sh b/Scripts/create-xcframework.sh
index 87679aa8..e03e216b 100755
--- a/Scripts/create-xcframework.sh
+++ b/Scripts/create-xcframework.sh
@@ -5,6 +5,8 @@ set -o pipefail
 
 XCODE_VERSION=$(xcodebuild -version | head -n 1| awk -F ' ' '{print $2}')
 XCODE_VERSION_MAJOR=$(echo $XCODE_VERSION | awk -F '.' '{print $1}')
+XCODE_VERSION_MINOR=$(echo $XCODE_VERSION | awk -F '.' '{print $2}')
+XCODE_VERSION_PATCH=$(echo $XCODE_VERSION | awk -F '.' '{print $3}')
 if [ -z "$SRCROOT" ]
 then
     SRCROOT=$(pwd)
@@ -25,7 +27,7 @@ then
     PLATFORMS+=("macCatalyst")
 fi
 
-if [ $XCODE_VERSION_MAJOR -ge 15 ]
+if [[ ($XCODE_VERSION_MAJOR -gt 15) || ($XCODE_VERSION_MAJOR -eq 15 && $XCODE_VERSION_MINOR -ge 2) ]]
 then
     PLATFORMS+=("visionOS")
     PLATFORMS+=("visionOSSimulator")
diff --git a/Scripts/sign-xcframework.sh b/Scripts/sign-xcframework.sh
new file mode 100755
index 00000000..7b5ab374
--- /dev/null
+++ b/Scripts/sign-xcframework.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+
+set -e
+set -o pipefail
+
+if [ -z "$SRCROOT" ]
+then
+    SRCROOT=$(pwd)
+fi
+
+# Self-sign XCFramework
+if [ -z CODESIGN_KEY_BASE64 ]; then
+    echo "Ignore Codesign XCFramework! You must sign SDWebImage before shipping to App Store. See: https://developer.apple.com/support/third-party-SDK-requirements"
+    exit 0
+fi
+
+KEYCHAIN=~/Library/Keychains/ios.keychain
+KEYCHAIN_PASSWORD=SDWebImage
+CODESIGN_IDENTIFY_NAME=SDWebImage\ Signing\ Certificate
+KEY_PASSWORD=""
+
+echo $CODESIGN_KEY_BASE64 | base64 -D > "$(PWD)/Certificate/${CODESIGN_IDENTIFY_NAME}.p12"
+
+security create-keychain -p "$KEYCHAIN_PASSWORD" ios.keychain
+security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN
+
+security import "$(PWD)/Certificate/${CODESIGN_IDENTIFY_NAME}.cer" -k $KEYCHAIN -T /usr/bin/codesign -T /usr/bin/security
+security import "$(PWD)/Certificate/${CODESIGN_IDENTIFY_NAME}.p12" -k $KEYCHAIN -P "$KEY_PASSWORD" -T /usr/bin/codesign -T /usr/bin/security
+security list-keychains -s ios.keychain
+security set-key-partition-list -S "apple-tool:,apple:" -k "$KEYCHAIN_PASSWORD" $KEYCHAIN
+
+echo "Codesign XCFramework"
+/usr/bin/codesign --force --timestamp -v --sign "SDWebImage Signing Certificate" "${SRCROOT}/build/SDWebImage.xcframework"
+
+rm -rf "$(PWD)/Certificate/${CODESIGN_IDENTIFY_NAME}.p12"
+security delete-keychain ios.keychain
\ No newline at end of file