Comments on jpackage (JEP 343)

[Sverre Moe]

ons. 2. okt. 2019 kl. 16:07 skrev Alexey Semenyuk <
alexey.semenyuk at oracle.com>:

> Hi Sverre,
>
> Thank you for doing this research. I don't think we should complicate
> jpackage by adding signing steps in it.
> However we can add a call to custom script after msi is constructed but
> before it get embedded in exe installer.
> This script can sign msi.

We already support call of custom script from resource dir before
> building msi. Just need to add another call.
>
> - Alexey
>

I can certainly use the custom application-post-image.wsf to sign the
application image executable. However I don't think it would be easy
considering that this executable is left read-only by jpackage.

When it comes to signing the MSI and EXE installers, that can be done after
running jpackage with a Gradle Exec task.

/Sverre