Signing NSIS uninstaller from Linux script

[alfageme]

Sorry for the late reply guys! Thank you all so much for your help.

@Yathosho Yup, I'm open to every option, but not knowing NSIS internals, I decided to ask first as It didn't looked trivial to me; as I said, I thought the uninstaller was going to be stored inside the exe itself. Once I locate the uninstaller inside the installer, signing it would be just replicate what we do with the installer.

Again, thank you very much guys!

@JasonFriday13 I'll definitely use the "experimental" patch and share the results of it. We use the script from a Dockerfile, so anything that favors having the same config in most of the pipeline and just modifying the NSIS script would be amazing.

[JasonFriday13]

Originally Posted by alfageme

@Yathosho Yup, I'm open to every option, but not knowing NSIS internals, I decided to ask first as It didn't looked trivial to me; as I said, I thought the uninstaller was going to be stored inside the exe itself. Once I locate the uninstaller inside the installer, signing it would be just replicate what we do with the installer.

The exehead is shared between the installer and uninstaller, and the uninstall script and icons are separate. This saves a whole exehead worth of data (about 40kb).

Originally Posted by alfageme

@JasonFriday13 I'll definitely use the "experimental" patch and share the results of it. We use the script from a Dockerfile, so anything that favors having the same config in most of the pipeline and just modifying the NSIS script would be amazing.

I've already written it, check out https://sourceforge.net/p/nsis/patches/280/.