Preserve original identifier when pseudo-signing

Author: mrmacete

lib/tools.js

@@ -135,10 +135,25 @@ async function pseudoSign (entitlement, file) {
   } else {
     args.push('-S');
   }
+  const identifier = await getIdentifier(file);
+  if (identifier !== undefined) {
+    args.push('-I' + identifier);
+  }
   args.push(file);
   return execProgram(getTool('ldid2'), args, null);
 }
 
+async function getIdentifier (file) {
+  const res = await execProgram(getTool('codesign'), ['-dv', file], null);
+  const lines = res.stderr.split('\n');
+  for (const line of lines) {
+    const splt = line.split('Identifier=');
+    if (splt.length === 2) {
+      return splt[1];
+    }
+  }
+}
+
 async function verifyCodesign (file, keychain, cb) {
   const args = ['-v', '--no-strict'];
   if (typeof keychain === 'string') {