Add ability to sign update.json, needed for autoupdates (#354)

* Add ability to sign update.json, needed for autoupdates

* Remove update from URL

2 files changed, 57 insertions, 0 deletions

diff --git a/buildSrc/generate-public-key.sh b/buildSrc/generate-public-key.sh
new file mode 100755
index 00000000..3f778c53
--- /dev/null
+++ b/buildSrc/generate-public-key.sh
@@ -0,0 +1,31 @@
+#!/bin/bash
+#
+# Copyright (C) 2022 NotEnoughUpdates contributors
+#
+# This file is part of NotEnoughUpdates.
+#
+# NotEnoughUpdates is free software: you can redistribute it
+# and/or modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation, either
+# version 3 of the License, or (at your option) any later version.
+#
+# NotEnoughUpdates is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with NotEnoughUpdates. If not, see <https://www.gnu.org/licenses/>.
+#
+
+
+output="$(dirname $(dirname $(readlink -f "$0")))/src/main/resources/moulberry.key"
+
+echo processing rsa input key from $1, and outputting to $output
+
+tempfile="$(mktemp)"
+ssh-keygen -f "$1" -e -m pkcs8 > "$tempfile"
+openssl rsa -pubin -in "$tempfile" -outform der > $output
+
+echo saved x509 public key at $output
+
diff --git a/buildSrc/moulsign.sh b/buildSrc/moulsign.sh
new file mode 100755
index 00000000..dacb8ec3
--- /dev/null
+++ b/buildSrc/moulsign.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+#
+# Copyright (C) 2022 NotEnoughUpdates contributors
+#
+# This file is part of NotEnoughUpdates.
+#
+# NotEnoughUpdates is free software: you can redistribute it
+# and/or modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation, either
+# version 3 of the License, or (at your option) any later version.
+#
+# NotEnoughUpdates is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with NotEnoughUpdates. If not, see <https://www.gnu.org/licenses/>.
+#
+
+echo use key $1, signing file $2
+openssl dgst -sign "$1" "$2" > "$2.asc"
+echo signature saved to "$2.asc"
+
+
+