use jsign

.gitignore

@@ -17,4 +17,5 @@ i2pversion_override
 *.exe
 *.log
 cmd
-*.so
+*.so
+*.jar

build.sh

@@ -31,12 +31,15 @@ fi
 if [ -z "${JAVA_HOME}" ]; then
   JAVA_HOME=`type -p java|xargs readlink -f|xargs dirname|xargs dirname`
 fi
+if [ "$(expr substr $(uname -s) 1 5)" == "Linux" ]; then
+  JAVA_HOME=`type -p java|xargs readlink -f|xargs dirname|xargs dirname`
+fi
 echo "Building with: $JAVA, $JAVA_HOME"
 sleep 5s
 
 HERE="$PWD"
 if [ ! -d "$HERE/../i2p.i2p.jpackage-build/" ]; then
-  git clone https://i2pgit.org/i2p-hackers/i2p.i2p "$HERE/../i2p.i2p.jpackage-build/"
+  git clone --depth 1 -b "$VERSION" https://i2pgit.org/i2p-hackers/i2p.i2p "$HERE/../i2p.i2p.jpackage-build/"
 fi
 cd "$HERE/../i2p.i2p.jpackage-build/"
 git pull --tags
@@ -54,7 +57,7 @@ I2P_JBIGI="$HERE/../i2p.i2p.jpackage-build/installer/lib/jbigi"
 
 
 echo "compiling custom launcher"
-mkdir build
+mkdir -p build
 cp "$I2P_JARS"/*.jar build
 if [ ! -f "$HERE/build/jna.jar" ]; then
   wget -O "$HERE/build/jna.jar" "https://repo1.maven.org/maven2/net/java/dev/jna/jna/$JNA_VERSION/jna-$JNA_VERSION.jar"

i2pversion

@@ -1,14 +1,14 @@
 #! /usr/bin/env sh
 
 JNA_VERSION=5.11.0
-export JNA_VERSION=$JNA_VERSION
+export JNA_VERSION=5.11.0
 
 #Comment this out to build from an alternate branch or
 # the tip of the master branch.
 I2P_VERSION=1.7.7
-export I2P_VERSION=$I2P_VERSION
+export I2P_VERSION=1.7.7
 VERSION=i2p-jpackage-1.7.1
-export VERSION="$VERSION"
+export VERSION=i2p-jpackage-1.7.1
 
 #Uncomment this to build from the tip of the master.
 #I2P_VERSION=1.8.0

sign.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+
+. i2pversion
+
+if [ -f i2pversion_override ]; then
+    . i2pversion_override
+fi
+
+. config.sh
+
+if [ -f config_overide.sh ]; then
+    . config_override.sh
+fi
+
+linuxsign() {
+    if [ ! -f jsign-4.1.jar ]; then
+        wget -O jsign-4.1.jar https://github.com/ebourg/jsign/releases/download/4.1/jsign-4.1.jar
+    fi
+    java -jar jsign-4.1.jar \
+    -keystore "$JAVA_HOME/lib/security/cacerts" \
+    -storepass changeit \
+    -keyfile "$HOME/signingkeys/signing-key.jks" \
+    -keypass changeit \
+    -tsaurl "http://timestamp.sectigo.com" \
+    -name "I2P-Browser-Installer" \
+    -alg "SHA-512" \
+    "$1"
+}
+
+if [ "$(expr substr $(uname -s) 1 5)" == "Linux" ]; then
+  JAVA_HOME=`type -p java|xargs readlink -f|xargs dirname|xargs dirname`
+    linuxsign I2P-Profile-Installer-$I2P_VERSION.exe
+    cp "I2P-Profile-Installer-$I2P_VERSION.exe" "I2P-Profile-Installer-$I2P_VERSION-signed.exe"
+else
+    signtool sign "I2P-Profile-Installer-$I2P_VERSION.exe"
+    cp "I2P-Profile-Installer-$I2P_VERSION.exe" "I2P-Profile-Installer-$I2P_VERSION-signed.exe"
+fi
+
+
+

src/nsis/i2pbrowser-jpackage.nsi

@@ -1 +1 @@
-!define I2P_VERSION 1.7.5
+!define I2P_VERSION 2P_VERSION