Building applications with electron-packager results in an error

Context

• Electron version: v1.8.7-hpcp-vmp1010
• Operating system: MacOS High Sierra
• Node version: v6.13
• electron-packager 12.0.1 to build the Mac application (I see electron-release is using "^3.0.1")
• electron-winstaller to build the Win application

Questions

1. Do I need to build the unsigned version of my application with castlabs/electron-releases?
2. Can I build the unsigned version of my app with electron/electron and then sign it using the script provided by castlabs/electron-releases?
3. What is the recommended way to build the unsigned versions of the app? Or documentation regarding it?

What I have tried

• I tried building with electron: "1.8.7", but then when I run your python script, it completes without an error and without creating signed applications
• When I try to build the unsigned applications with v1.8.7-hpcp-vmp1010, electron-packager fails with an error because it creates the wrong url Downloading tmp-13310-0-electron-v1.8.7-hdcp-vmp1010-win32-x64.zip Error: GET https://github.com/electron/electron/releases/download/v1.8.7-hdcp-vmp1010/electron-v1.8.7-hdcp-vmp1010-win32-x64.zip returned 404. This is obviously the wrong url.
• I am debugging into electron-packager, but I thought I would ask in parallel to doing that EDIT:
• Ah, get baseUrl () { return process.env.NPM_CONFIG_ELECTRON_MIRROR || process.env.npm_config_electron_mirror || process.env.ELECTRON_MIRROR || this.opts.mirror || 'https://github.com/electron/electron/releases/download/v' }, environment variables to change where the download comes from.

Updates

• Got the app building with "electron": "https://github.com/castlabs/electron-releases#v1.8.7-hdcp-vmp1010" with electron-packager by setting one of those environment variables (export NPM_CONFIG_ELECTRON_MIRROR=https://github.com/castlabs/electron-releases/releases/download/v
• the signing only works for the Window .exes because electron-packager chose to download https://github.com/castlabs/electron-releases/releases/download/v1.8.7-hdcp-vmp1010/electron-v1.8.7-hdcp-vmp1010-win32-ia32.zip' and not the darwin one, so now I am debugging that
• the signing creates a .sig file, which I assume is going to get picked up by Widevine in the application by the .sig being in the same folder as the .exe, is that correct?
• Writing this all here to help future engineers

[khwaaj]

Great news!

The way things stand we will not release a 2.x version, but will jump directly to 3.x to be able to use some updates available in later versions of Chromium.

[khwaaj]

Happy to be of help. The re-sign script works with either DER or PEM formatted files, for both the key and certificate, but if you want to convert them you can certainly use openssl to do it, like you suggest.