Module Oui.CodesignSource

Code signing utilities for macOS binaries.

Sourcetype signing_identity =
  1. | AdHoc
    (*

    Ad-hoc signature (no developer certificate)

    *)
  2. | DeveloperID of string
    (*

    Developer ID Application certificate

    *)
Sourcetype sign_options = {
  1. force : bool;
  2. timestamp : bool;
    (*

    required for Developer ID distribution

    *)
  3. entitlements : string option;
    (*

    path to entitlements plist file

    *)
}
Sourceval default_sign_options : sign_options
Sourceval sign_binary : ?options:sign_options -> identity:signing_identity -> OpamFilename.t -> unit

sign_binary ~identity binary signs a binary with the specified identity and options.

Sourceval sign_binary_adhoc : ?force:bool -> OpamFilename.t -> unit

sign_binary_adhoc binary signs a binary with ad-hoc signature.

Sourceval sign_binary_with_dev_id : ?force:bool -> ?timestamp:bool -> cert_name:string -> OpamFilename.t -> unit

sign_binary_with_dev_id ~cert_name binary signs a binary with Developer ID certificate

Sourceval verify_signature : OpamFilename.t -> bool

verify_signature binary returns true if the binary has a valid signature.