CRT/storebound
1
0
Fork 0
Code Issues Pull requests Releases 1 Packages 1 Activity Actions

desktop-release: sign by key path only (a TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

Browse source
This commit is contained in:
CRTkafa 2026-10-29 19:40:56 +07:00
parent 96ec7ba60f
commit 02435de966
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tools/desktop-release.ts
View file

@ -222,7 +222,7 @@ function signFile(file: string): string {
rmSync(`${file}.sig`, { force: true }); rmSync(`${file}.sig`, { force: true });
// the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer // the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
// refuse "--private-key-path cannot be used with --private-key" (0.8.59) // refuse "--private-key-path cannot be used with --private-key" (0.8.59)
const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' }; const env: Record<string, string | undefined> = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH; delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env }); run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
const sig = readFileSync(`${file}.sig`, 'utf8').trim(); const sig = readFileSync(`${file}.sig`, 'utf8').trim();