fix(windows): Get-PfxCertificate hangs

Close #1735

Author: MariaDima

packages/electron-builder-util/src/util.ts

@@ -29,7 +29,7 @@ export interface ExecOptions extends BaseExecOptions {
 }
 
 export function removePassword(input: string) {
-  return input.replace(/(-P |pass:| \/p |-pass )([^ ]+)/g, function (match, p1, p2) {
+  return input.replace(/(-String |-P |pass:| \/p |-pass )([^ ]+)/g, function (match, p1, p2) {
     return `${p1}${createHash("sha256").update(p2).digest("hex")} (sha256 hash)`
   })
 }

packages/electron-builder/src/targets/appx.ts

@@ -1,5 +1,6 @@
 import BluebirdPromise from "bluebird-lst"
-import { asArray, exec, spawn, use } from "electron-builder-util"
+import _debug from "debug"
+import { asArray, spawn, use } from "electron-builder-util"
 import { deepAssign } from "electron-builder-util/out/deepAssign"
 import { copyDir, copyFile } from "electron-builder-util/out/fs"
 import { asyncAll, orIfFileNotExist } from "electron-builder-util/out/promise"
@@ -20,6 +21,7 @@ const vendorAssetsForDefaultAssets: { [key: string]: string; } = {
 }
 
 const DEFAULT_RESOURCE_LANG = "en-US"
+const debug = _debug("electron-builder:appx")
 
 export default class AppXTarget extends Target {
   readonly options: AppXOptions = deepAssign({}, this.packager.platformSpecificBuildOptions, this.packager.config.appx)
@@ -47,9 +49,9 @@ export default class AppXTarget extends Target {
         throw new Error("Please specify appx.publisher: cannot get publisher from your code signing certificate if EV cert is used")
       }
 
-      publisher = (await exec("powershell.exe", [`(Get-PfxCertificate "${cscFile}").Subject`])).trim()
+      publisher = await packager.computedPublisherSubjectOnWindowsOnly.value
       if (!publisher) {
-        throw new Error("Please specify appx.publisher: Get-PfxCertificate returns empty string")
+        throw new Error("Please specify appx.publisher, cannot compute from p12 file")
       }
     }
 
@@ -80,15 +82,15 @@ export default class AppXTarget extends Target {
     if (isScaledAssetsProvided(userAssets)) {
       const priConfigPath = path.join(preAppx, "priconfig.xml")
       const makePriPath = path.join(vendorPath, "windows-10", Arch[arch], "makepri.exe")
-      await spawn(makePriPath, ["createconfig", "/cf", priConfigPath, "/dq", "en-US", "/pv", "10.0.0", "/o"])
-      await spawn(makePriPath, ["new", "/pr", preAppx, "/cf", priConfigPath, "/of", preAppx])
+      await spawn(makePriPath, ["createconfig", "/cf", priConfigPath, "/dq", "en-US", "/pv", "10.0.0", "/o"], undefined, {isDebugEnabled: debug.enabled})
+      await spawn(makePriPath, ["new", "/pr", preAppx, "/cf", priConfigPath, "/of", preAppx], undefined, {isDebugEnabled: debug.enabled})
 
       makeAppXArgs.push("/l")
     }
 
     use(this.options.makeappxArgs, (it: Array<string>) => makeAppXArgs.push(...it))
     // wine supports only ia32 binary in any case makeappx crashed on wine
-    await spawn(path.join(vendorPath, "windows-10", Arch[arch], "makeappx.exe"), makeAppXArgs)
+    await spawn(path.join(vendorPath, "windows-10", Arch[arch], "makeappx.exe"), makeAppXArgs, undefined, {isDebugEnabled: debug.enabled})
     await packager.sign(destination)
 
     packager.dispatchArtifactCreated(destination, this, arch, packager.computeSafeArtifactName("appx"))

packages/electron-builder/src/util/flags.ts

@@ -6,6 +6,10 @@ export function isUseSystemSigncode() {
   return isEnvTrue(process.env.USE_SYSTEM_SIGNCODE)
 }
 
+export function isBuildCacheEnabled() {
+  return !isEnvTrue(process.env.ELECTRON_BUILDER_DISABLE_BUILD_CACHE)
+}
+
 function isEnvTrue(value: string | null) {
   if (value != null) {
     value = value.trim()

packages/electron-builder/src/winPackager.ts

@@ -17,6 +17,7 @@ import { AppPackageHelper, NsisTarget } from "./targets/nsis"
 import { createCommonTarget } from "./targets/targetFactory"
 import { WebInstallerTarget } from "./targets/WebInstallerTarget"
 import { BuildCacheManager, digest } from "./util/cacheManager"
+import { isBuildCacheEnabled } from "./util/flags"
 import { time } from "./util/timer"
 import { execWine } from "./util/wine"
 import { FileCodeSigningInfo, getSignVendorPath, sign, SignOptions } from "./windowsCodeSign"
@@ -61,6 +62,17 @@ export class WinPackager extends PlatformPackager<WinBuildOptions> {
 
   private _iconPath = new Lazy<string | null>(() => this.getValidIconPath())
 
+  readonly computedPublisherSubjectOnWindowsOnly = new Lazy<string | null>(async () => {
+    const cscInfo = await this.cscInfo.value
+    if (cscInfo == null) {
+      return null
+    }
+
+    // https://github.com/electron-userland/electron-builder/issues/1735
+    const args = cscInfo.password ? [`(Get-PfxData "${cscInfo.file!}" -Password (ConvertTo-SecureString -String "${cscInfo.password}" -Force -AsPlainText)).EndEntityCertificates.Subject`] : [`(Get-PfxCertificate "${cscInfo.file!}").Subject`]
+    return await exec("powershell.exe", args, {timeout: 30 * 1000}).then(it => it.trim())
+  })
+
   readonly computedPublisherName = new Lazy<Array<string> | null>(async () => {
     let publisherName = (<WinBuildOptions>this.platformSpecificBuildOptions).publisherName
     if (publisherName === null) {
@@ -76,9 +88,10 @@ export class WinPackager extends PlatformPackager<WinBuildOptions> {
     if (publisherName == null && cscFile != null) {
       if (process.platform === "win32") {
         try {
-          const subject = parseDn(await exec("powershell.exe", [`(Get-PfxCertificate "${cscFile}").Subject`], {timeout: 30 * 1000})).get("CN")
-          if (subject) {
-            return asArray(subject)
+          const subject = await this.computedPublisherSubjectOnWindowsOnly.value
+          const commonName = subject == null ? null : parseDn(subject).get("CN")
+          if (commonName) {
+            return asArray(commonName)
           }
         }
         catch (e) {
@@ -265,7 +278,8 @@ export class WinPackager extends PlatformPackager<WinBuildOptions> {
       args.push("--set-icon", it)
     })
 
-    const cscInfoForCacheDigest = isCI ? null : await this.cscInfo.value
+    const config = this.config
+    const cscInfoForCacheDigest = !isBuildCacheEnabled() || isCI || config.electronDist != null ? null : await this.cscInfo.value
     let buildCacheManager: BuildCacheManager | null = null
     // resources editing doesn't change executable for the same input and executed quickly - no need to complicate
     if (cscInfoForCacheDigest != null) {
@@ -276,8 +290,8 @@ export class WinPackager extends PlatformPackager<WinBuildOptions> {
       const timer = time("executable cache")
       // md5 is faster, we don't need secure hash
       const hash = createHash("md5")
-      hash.update(this.config.electronVersion || "no electronVersion")
-      hash.update(this.config.muonVersion || "no muonVersion")
+      hash.update(config.electronVersion || "no electronVersion")
+      hash.update(config.muonVersion || "no muonVersion")
       hash.update(JSON.stringify(this.platformSpecificBuildOptions))
       hash.update(JSON.stringify(args))
       hash.update(cscInfoForCacheDigest.certificateSha1 || "no certificateSha1")

test/out/mac/__snapshots__/CodeSignTest.js.snap

@@ -7,3 +7,7 @@ exports[`remove password from log 2`] = `"pass:2c26b46b68ffc68ff99b453c1d3041341
 exports[`remove password from log 3`] = `"/usr/bin/productbuild -P 56ef615b2e26c3b9a10dc2824238fb8b8a154ec7db4907ec6ee357ed7bb350b7 (sha256 hash)"`;
 
 exports[`remove password from log 4`] = `" /p 2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae (sha256 hash)"`;
+
+exports[`remove password from log 5`] = `"ConvertTo-SecureString -String 4d967a30111bf29f0eba01c448b375c1629b2fed01cdfcc3aed91f1b57d5dd5e (sha256 hash)"`;
+
+exports[`remove password from log 6`] = `"(Get-PfxData \\"C:\\\\Users\\\\develar\\\\AppData\\\\Local\\\\Temp\\\\electron-builder-yBY8D2\\\\0-1.p12\\" -Password (ConvertTo-SecureString -String 4d967a30111bf29f0eba01c448b375c1629b2fed01cdfcc3aed91f1b57d5dd5e (sha256 hash) -Force -AsPlainText)).EndEntityCertificates.Subject"`;

test/src/mac/CodeSignTest.ts

@@ -25,4 +25,6 @@ test.ifDevOrLinuxCi("remove password from log", async () => {
   expect(removePassword("pass:foo")).toMatchSnapshot()
   expect(removePassword("/usr/bin/productbuild -P wefwef")).toMatchSnapshot()
   expect(removePassword(" /p foo")).toMatchSnapshot()
+  expect(removePassword('ConvertTo-SecureString -String "test"')).toMatchSnapshot()
+  expect(removePassword('(Get-PfxData "C:\\Users\\develar\\AppData\\Local\\Temp\\electron-builder-yBY8D2\\0-1.p12" -Password (ConvertTo-SecureString -String "test" -Force -AsPlainText)).EndEntityCertificates.Subject')).toMatchSnapshot()
 })

test/src/windows/appxTest.ts

@@ -4,6 +4,9 @@ import { app } from "../helpers/packTester"
 // noinspection SpellCheckingInspection
 const cscLink = "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\n"
 
+// test that we can get info from protected pfx
+const protectedCscLink = "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"
+
 test.ifWindows("AppX", app({
   targets: Platform.WINDOWS.createTarget(["appx"], Arch.ia32, Arch.x64),
   cscLink: cscLink,
@@ -13,8 +16,8 @@ test.ifWindows("AppX", app({
 // todo - check manifest
 test.ifWindows("languages", app({
   targets: Platform.WINDOWS.createTarget(["appx"]),
-  cscLink: cscLink,
-  cscKeyPassword: "",
+  cscLink: protectedCscLink,
+  cscKeyPassword: "test",
   config: {
     appx: {
       languages: ["de-DE", "ru-RU"]