From aed841dc0baceb7b9b006b136f059923c9a8cb6d Mon Sep 17 00:00:00 2001
From: mark-cachy <marco@catelli.it>
Date: Thu, 28 May 2026 18:06:10 +0200
Subject: [PATCH] firma su exe windows

---
 .gitea/workflows/release.yaml | 16 ++++++++++++++++
 pubspec.yaml                  |  2 +-
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index afd7684..85b9887 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -21,11 +21,27 @@ jobs:
       - name: Build Flutter Windows
         run: flutter build windows --release
 
+      # 1. FIRMA DELL'ESEGUIBILE RAW
+      - name: Firma Eseguibile Flutter
+        run: |
+          # Cerca dinamicamente signtool.exe nell'SDK di Windows per non sbagliare percorso
+          $Signtool = (Get-ChildItem "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\signtool.exe" | Sort-Object FullName -Descending | Select-Object -First 1).FullName
+          
+          # Sostituisci il percorso con dove hai salvato fisicamente il file .pfx sul PC del runner!
+          & $Signtool sign /f "C:\flux_privato.pfx" /p "${{ secrets.PFX_PASSWORD }}" /fd SHA256 "build\windows\x64\runner\Release\flux.exe"
+
       - name: Build Windows Installer
         run: |
           $TagVersion = "${{ github.ref_name }}".Substring(1)
           & "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" "/DMyAppVersion=$TagVersion" "win_installer.iss"
 
+      # 2. FIRMA DELL'INSTALLER GENERATO DA INNO SETUP
+      - name: Firma Installer
+        run: |
+          $Signtool = (Get-ChildItem "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\signtool.exe" | Sort-Object FullName -Descending | Select-Object -First 1).FullName
+          
+          & $Signtool sign /f "C:\flux_privato.pfx" /p "${{ secrets.PFX_PASSWORD }}" /fd SHA256 "build\windows\installer\FluxInstaller.exe"
+
       # Nel dubbio usiamo l'action per caricare l'asset
       - name: Upload Windows Asset
         uses: https://gitea.com/actions/release-action@main
diff --git a/pubspec.yaml b/pubspec.yaml
index dd4cb5d..1b70ac0 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -1,7 +1,7 @@
 name: flux
 description: "Gestione attività negozio di telefonia"
 publish_to: 'none'
-version: 1.1.1+19
+version: 1.1.2+20
 
 environment:
   sdk: ^3.11.3