v0.1.0

.github/workflows/publish.yml

@@ -0,0 +1,55 @@
+
+name: Publish Certificates
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  test:
+    runs-on: windows-2022
+    steps:
+      -
+        name: Action Checkout
+        uses: actions/checkout@v3
+      -
+        name: Setup Golang
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: ./go.mod
+          cache-dependency-path: ./go.sum
+      -
+        name: Output TAG
+        id: tag
+        shell: bash
+        run: |
+          RELEASE_VERSION="${GITHUB_REF#refs/*/}"
+          echo "tag=${RELEASE_VERSION}"
+          echo "tag=${RELEASE_VERSION}" >> "$GITHUB_OUTPUT"
+      -
+        name: Run build-windows.exe
+        env:
+          TAG: ${{ steps.tag.outputs.tag }}
+          CODE_SIGN_PFX: ${{ secrets.CODE_SIGN_PFX }}
+          CODE_SIGN_PFX_PASSWORD: ${{ secrets.CODE_SIGN_PFX_PASSWORD }}
+        run: go run ./scripts/build-windows.go
+      -
+        name: Create Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: Release ${{ github.ref }}
+          draft: false
+          prerelease: false
+      -
+        name: Upload Release Assets
+        uses: zyxkad/upload-release-asset-dir@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_dir: ./output

.gitignore

@@ -0,0 +1,7 @@
+
+# Mac OS
+.DS_Store
+
+# Builds
+/build
+/output

LiterMC-CodeSign.cer

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

LiterMC-RootCA.cer

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

go.mod

@@ -0,0 +1,3 @@
+module github.com/LiterMC/certificate
+
+go 1.22.0

images/README.rtf

@@ -0,0 +1,23 @@
+{\rtf1\ansi\ansicpg1252\cocoartf2758
+\cocoatextscaling0\cocoaplatform0{\fonttbl\f0\froman\fcharset0 Times-Bold;\f1\froman\fcharset0 Times-Roman;}
+{\colortbl;\red255\green255\blue255;\red38\green38\blue38;\red255\green255\blue255;}
+{\*\expandedcolortbl;;\cssrgb\c20000\c20000\c20000;\cssrgb\c100000\c100000\c100000;}
+{\*\listtable{\list\listtemplateid1\listhybrid{\listlevel\levelnfc23\levelnfcn23\leveljc0\leveljcn0\levelfollow0\levelstartat1\levelspace360\levelindent0{\*\levelmarker \{disc\}}{\leveltext\leveltemplateid1\'01\uc0\u8226 ;}{\levelnumbers;}\fi-360\li720\lin720 }{\listname ;}\listid1}}
+{\*\listoverridetable{\listoverride\listid1\listoverridecount0\ls1}}
+\vieww11520\viewh8400\viewkind0
+\deftab720
+\pard\pardeftab720\sa288\qc\partightenfactor0
+
+\f0\b\fs30 \cf2 \cb3 \expnd0\expndtw0\kerning0
+You are going to install LiterMC certificates\
+\pard\pardeftab720\sa288\partightenfactor0
+
+\f1\b0 \cf2 LiterMC certificates include:\
+\pard\tx220\tx720\pardeftab720\li720\fi-720\sa288\partightenfactor0
+\ls1\ilvl0\cf2 \kerning1\expnd0\expndtw0 {\listtext	\uc0\u8226 	}\expnd0\expndtw0\kerning0
+a self-signed Root CA\
+\ls1\ilvl0\kerning1\expnd0\expndtw0 {\listtext	\uc0\u8226 	}\expnd0\expndtw0\kerning0
+a code sign certificates\
+\pard\pardeftab720\sa288\partightenfactor0
+
+\f0\b \cf2 Before you install the certificates, ensure the fingerprint of the Root CA match the fingerprint in the {\field{\*\fldinst{HYPERLINK "https://github.com/LiterMC/certificate/blob/main/README.md#fingerprints"}}{\fldrslt README}}.}

installer/windows/Product.Loc-en.wxl

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<WixLocalization Culture="en-us" Codepage="1252" xmlns="http://schemas.microsoft.com/wix/2006/localization">
+	<String Id="Language">1033</String>
+
+	<String Id="DowngradeError">A newer version of [ProductName] is already installed.</String>
+</WixLocalization>

installer/windows/Product.wxs

@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi" xmlns:iis="http://schemas.microsoft.com/wix/IIsExtension">
+	<Product
+		Id="*"
+		Name="LiterMC Certificates"
+		Manufacturer="https://github.com/LiterMC"
+		Version="$(var.BuildVersion)"
+		UpgradeCode="0174C2AE-7D95-403F-B549-ADB88C58379B"
+		Language="!(loc.Language)"
+	>
+		<Package
+			Id="*"
+			Keywords="Installer,Certificate"
+			Description="LiterMC Certificate Installer"
+			InstallerVersion="500"
+			Compressed="yes"
+			InstallScope="perUser"
+			Languages="1033"
+		/>
+		<Property Id="ARPCONTACT" Value="[email protected]" />
+		<Property Id="ARPREADME" Value="https://github.com/LiterMC/certificate/" />
+		<Property Id="ARPHELPLINK" Value="https://github.com/LiterMC/certificate/" />
+
+		<WixVariable Id="WixUILicenseRtf" Value="images\README.rtf" />
+		<Property Id="LicenseAccepted" Value="1"/>
+		<WixVariable Id="WixUIBannerBmp" Value="images\MsiBanner.bmp" />
+		<WixVariable Id="WixUIDialogBmp" Value="images\MsiDialog.bmp" />
+
+		<MediaTemplate EmbedCab="yes" CompressionLevel="high" MaximumUncompressedMediaSize="10" />
+		<MajorUpgrade DowngradeErrorMessage="!(loc.DowngradeError)" />
+
+		<Binary Id="RootCA.Binary" SourceFile="LiterMC-RootCA.cer" />
+		<Binary Id="CodeSign.Binary" SourceFile="LiterMC-CodeSign.cer" />
+
+		<Directory Id="TARGETDIR">
+			<Component Id="InstallLiterMCRootCA" Guid="7BCC6FD0-BA24-46A1-8358-0CD2DAF0E1BE">
+				<iis:Certificate
+					Id="LiterMCRootCA"
+					Name="LiterMC-RootCA"
+					StoreLocation="currentUser"
+					StoreName="root"
+					Overwrite="yes"
+					BinaryKey="RootCA.Binary"
+				/>
+			</Component>
+			<Component Id="InstallLiterMCCodeSign" Guid="EB10C0DA-39F7-44BF-940B-4752116A8213">
+				<iis:Certificate
+					Id="LiterMCCodeSign"
+					Name="LiterMC-CodeSign"
+					StoreLocation="currentUser"
+					StoreName="trustedPublisher"
+					Overwrite="yes"
+					BinaryKey="CodeSign.Binary"
+				/>
+			</Component>
+		</Directory>
+		<Feature Id="Complete" Title="Install LiterMC Certifications" Level="1">
+			<ComponentRef Id="InstallLiterMCRootCA" />
+			<ComponentRef Id="InstallLiterMCCodeSign" />
+		</Feature>
+	</Product>
+</Wix>

private/.gitignore

@@ -0,0 +1,3 @@
+
+*
+!/.gitignore