Sign OSX builds

Author: pimterry

.travis.yml

@@ -18,6 +18,21 @@ addons:
     - fakeroot
     - rpm
 
+before_script:
+- >
+    if [[ "$TRAVIS_OS_NAME" == "osx" ]]; then
+      export CERTIFICATE_P12=certificates/Certificate.p12;
+      echo $CERTIFICATE_OSX_P12 | base64 --decode > $CERTIFICATE_P12;
+      export KEYCHAIN=httptoolkit-build.keychain;
+      export KEYCHAIN_PASSWORD=mysupersecretpassword
+      security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN;
+      security default-keychain -s $KEYCHAIN;
+      security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN;
+      security set-keychain-settings -t 3600 -u $KEYCHAIN
+      security import $CERTIFICATE_P12 -k $KEYCHAIN -P $CERTIFICATE_OSX_PASSWORD -T /usr/bin/codesign;
+      security set-key-partition-list -S apple-tool:,apple: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN
+    fi
+
 script:
 - npm run make
 

package.json

@@ -41,7 +41,12 @@
         ],
         "afterCopy": [
           "./src/after-copy.js"
-        ]
+        ],
+        "appBundleId": "tech.httptoolkit.desktop",
+        "appCategoryType": "public.app-category.developer-tools",
+        "osxSign": {
+          "keychain": "httptoolkit-build.keychain"
+        }
       },
       "electronWinstallerConfig": {
         "name": "httptoolkit",