2 files changed, 68 insertions, 4 deletions

diff --git a/buildSrc/src/main/kotlin/neubs/customSign.kt b/buildSrc/src/main/kotlin/neubs/customSign.kt
new file mode 100644
index 00000000..8140d71b
--- /dev/null
+++ b/buildSrc/src/main/kotlin/neubs/customSign.kt
@@ -0,0 +1,55 @@
+/*
+ * Copyright (C) 2024 NotEnoughUpdates contributors
+ *
+ * This file is part of NotEnoughUpdates.
+ *
+ * NotEnoughUpdates is free software: you can redistribute it
+ * and/or modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation, either
+ * version 3 of the License, or (at your option) any later version.
+ *
+ * NotEnoughUpdates is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with NotEnoughUpdates. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+package neubs
+
+import org.gradle.api.DefaultTask
+import org.gradle.api.tasks.TaskAction
+import java.security.KeyFactory
+import java.security.Signature
+import java.security.spec.PKCS8EncodedKeySpec
+
+abstract class CustomSignTask : DefaultTask() {
+
+    @TaskAction
+    fun run() {
+        println("Hash to sign: ")
+        val hash = readLine()!!.trim().toUpperCase()
+        require(hash.matches("[A-F0-9]{64}".toRegex())) { "Please provide a valid sha256 hash" }
+        val secrets = project.file("secrets").listFiles()?.toList()
+            ?.filter { !it.name.startsWith(".") } ?: emptyList()
+
+        if (secrets.isEmpty()) error("Could not find any secret files.")
+        secrets.forEach { require(it.name.endsWith(".der")) { "Invalid secret file ${it.name}" } }
+        project.file("build/signatures").mkdirs()
+        for (secret in secrets) {
+            val keySpec = PKCS8EncodedKeySpec(secret.readBytes())
+            val signature = Signature.getInstance("SHA256withRSA")
+            signature.initSign(KeyFactory.getInstance("RSA").generatePrivate(keySpec))
+            signature.update(hash.encodeToByteArray())
+            val file = project.file("build/signatures/_${secret.nameWithoutExtension}.asc")
+            file.writeBytes(signature.sign())
+            println("Generated signature at ${file.absolutePath}")
+        }
+    }
+
+    init {
+        outputs.upToDateWhen { false }
+    }
+}
diff --git a/buildSrc/src/main/kotlin/neubs/versioning.kt b/buildSrc/src/main/kotlin/neubs/versioning.kt
index 9294e164..24e6cc05 100644
--- a/buildSrc/src/main/kotlin/neubs/versioning.kt
+++ b/buildSrc/src/main/kotlin/neubs/versioning.kt
@@ -22,15 +22,24 @@ package neubs
 import org.gradle.api.Project
 import java.io.ByteArrayOutputStream
 
-fun Project.setVersionFromEnvironment(baseVersion: String) {
+fun Project.setVersionFromEnvironment(): String {
+    val baseVersion = run {
+        val baos = ByteArrayOutputStream()
+        exec {
+            commandLine("git", "describe", "--tags", "--abbrev=0")
+            standardOutput = baos
+            isIgnoreExitValue = true
+        }
+        (baos.toByteArray()).decodeToString().trim()
+    }
     val buildExtra = mutableListOf<String>()
     val buildVersion = properties["BUILD_VERSION"] as? String
     if (buildVersion != null) buildExtra.add(buildVersion)
-    if (System.getenv("CI") == "true") buildExtra.add("ci")
+    if (System.getenv("CI") == "true" && System.getenv("NEU_RELEASE") != "true") buildExtra.add("ci")
 
     val stdout = ByteArrayOutputStream()
     val execResult = exec {
-        commandLine("git", "describe", "--always", "--first-parent", "--abbrev=7")
+        commandLine("git", "rev-parse", "--short", "HEAD")
         standardOutput = stdout
         isIgnoreExitValue = true
     }
@@ -49,6 +58,6 @@ fun Project.setVersionFromEnvironment(baseVersion: String) {
     }
 
     version = baseVersion + (if (buildExtra.isEmpty()) "" else buildExtra.joinToString(prefix = "+", separator = "."))
-
+    return baseVersion
 }