Sign OSX builds

.travis.yml

@@ -187,6 +187,12 @@ before_script:
         ./tools/update_android_version.sh ${BITNESS} ${TRAVIS_BRANCH};
     fi
     
+  # Install signing cert into OSX keychain
+  - if [[ "${SPEC}" = "macx-clang" ]]; then
+        openssl aes-256-cbc -K $MAC_CERT_KEY -iv $MAC_CERT_IV -in deploy/MacCertificates.p12.enc -out deploy/MacCertificates.p12 -d &&
+        ./deploy/MacImportCert.sh;
+    fi
+
 script:
   # run qmake
   - mkdir ${SHADOW_BUILD_DIR} && cd ${SHADOW_BUILD_DIR}
@@ -197,7 +203,7 @@ script:
         echo "Daily build" &&
         export STABLE_OR_DAILY=DailyBuild;
     fi
-  - qmake -r ${TRAVIS_BUILD_DIR}/qgroundcontrol.pro CONFIG+=${CONFIG} CONFIG+=${STABLE_OR_DAILY} -spec ${SPEC};
+  - qmake -r ${TRAVIS_BUILD_DIR}/qgroundcontrol.pro CONFIG+=${CONFIG} CONFIG+=${STABLE_OR_DAILY} CONFIG+=codesign -spec ${SPEC};
 
   # compile
   - if [ "${SPEC}" != "macx-ios-clang" ]; then

QGCPostLinkInstaller.pri

@@ -31,6 +31,11 @@ installer {
         QMAKE_POST_LINK += && echo osxrelocator
         QMAKE_POST_LINK += && python $$SOURCE_DIR/tools/osxrelocator.py $${TARGET}.app/Contents @rpath @executable_path/../Frameworks -r > /dev/null 2>&1
 
+        codesign {
+            QMAKE_POST_LINK += && echo codesign
+            QMAKE_POST_LINK += && codesign --deep $${TARGET}.app -s WQREC9W69J
+        }
+
         # Create package
         QMAKE_POST_LINK += && echo hdiutil
         QMAKE_POST_LINK += && mkdir -p package

deploy/MacImportCert.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+KEY_CHAIN=mac-travis-build.keychain
+security create-keychain -p travis $KEY_CHAIN
+security default-keychain -s $KEY_CHAIN
+security unlock-keychain -p travis $KEY_CHAIN
+security set-keychain-settings -t 3600 -u $KEY_CHAIN
+security import deploy/MacCertificates.p12 -k $KEY_CHAIN -P $MAC_CERT_PASSWORD -T /usr/bin/codesign
+security set-key-partition-list -S apple-tool:,apple: -s -k travis $KEY_CHAIN
+security list-keychains -s $KEY_CHAIN