无需密码的 AIR 应用程序签名
我有一个构建服务器，可以生成用于部署的签名包。但是，我不想将用于签署包的密码嵌入到我们的 ant 文件中。有办法解决这个问题吗？如果我可以设置诸如无密码 ssh 的工作原理甚至使用钥匙串之类的东西，那就太好了。
I have a build server that generates our signed packages for deployment. However, I would prefer not to embed our passwords for signing the package in our ant file. Is there a way to get around this? It would be nice if I could setup something like how password-less ssh works or even use the keychain.
<rant>Why do Adobe products seem so unfriendly in terms of working in a team environment or when it comes to trying to automate them as part of a tool chain/regression suite?! Don't get me started on the Adobe updater either.</rant>
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
事实上，Adobe已经为此做了一些事情。我想您听说过 AIRI 文件，当 adt 创建 AIRI 时，它不需要签名。除此之外，我认为您无法在不使用证书密码的情况下签署 AIR 文件。
Actually, Adobe has done something for it. I guess you heard about AIRI files, when adt creates AIRI, it not requires signing. Other than that, I don't think you can sign AIR file without using certificate password.
我能想到的最佳解决方案是让具有正确权限的文件包含密码。然后在 ant build.xml 中，我让 ant 读取该文件并将内容设置为我的 adt 任务用于密钥传递的属性。这样我就可以提交 build.xml 文件并避免密码被窥探。我所要做的就是记住创建该文件并设置权限，以便只有构建进程/帐户才能访问它。
The best solution that I could come up with was to have a file with the correct permissions contain the password. Then in the ant build.xml I have ant read that file in and set the contents to a property that my adt task uses for the keypass. This way I can commit the build.xml file and leave the password out from prying eyes. All I have to do is remember to create that file and set the permissions such that only the build process/account has access to it.