From 9893b1bee469925932c6e0a31eb55627169960e6 Mon Sep 17 00:00:00 2001
From: Dave Page <dpage@pgadmin.org>
Date: Tue, 4 Oct 2016 14:33:52 +0100
Subject: [PATCH] Attempt to sign the Windows installer, failing with a warning
 if there's no cert available. Fixes #1823

---
 Make.bat | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/Make.bat b/Make.bat
index 42f4c32e7..9ab7773e7 100644
--- a/Make.bat
+++ b/Make.bat
@@ -39,6 +39,8 @@ IF %ERRORLEVEL% NEQ 0 EXIT /B %ERRORLEVEL%
 call :CREATE_INSTALLER
 IF %ERRORLEVEL% NEQ 0 EXIT /B %ERRORLEVEL%
 
+call :SIGN_INSTALLER
+
 CD %WD%
 goto:EXIT
 REM Main function Ends
@@ -402,6 +404,20 @@ GOTO:EOF
     CD %WD%
 GOTO:EOF
 
+:SIGN_INSTALLER
+    ECHO Attempting to sign the installer...
+    signtool sign  /t http://timestamp.verisign.com/scripts/timstamp.dll "%TARGETINSTALLER%\%INSTALLERNAME%"
+    IF %ERRORLEVEL% NEQ 0 (
+        ECHO
+        ECHO ************************************************************
+        ECHO * Failed to sign the installer
+        ECHO ************************************************************
+        SLEEP 5
+    )
+
+    CD %WD%
+GOTO:EOF
+
 :CLEANUP_ENV
     ECHO Cleaning up private environment...
     rd "%PGBUILDPATH%\%VIRTUALENV%\Include" /S /Q