Made something for creating detached code signatures for macOS/Windows binaries.
1. Reproducibly build program
2. Copy it
3. Codesign (+ notarize for macOS) the copy
4. Take a 'diff' between the 2
The '.diff' is just the signatures, which can be applied to the unsigned binaries at a later date (so others can verify build reproducibility)
Think I'll publish it to Debian and Home Brew once I add a few things; check it out!
Had a unique issue which #[0] found. Tor binaries for macOS weren't signed or notarized, so when he went to run `kmp-tor` on macOS aarch64 GateKeeper said "nope, not happening".
GitHub
kmp-tor-binary/tools/diff-cli/README.md at master ยท 05nelsonm/kmp-tor-binary
Contribute to 05nelsonm/kmp-tor-binary development by creating an account on GitHub.
