components/crx_file/crx_build_action_main.cc

// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifdef UNSAFE_BUFFERS_BUILD
// TODO(crbug.com/40285824): Remove this and convert code to safer constructs.
#pragma allow_unsafe_buffers
#endif

#include <cstdint>
#include <string>
#include <vector>

#include "base/files/file_path.h"
#include "base/files/file_util.h"
#include "base/logging.h"
#include "components/crx_file/crx_creator.h"
#include "crypto/rsa_private_key.h"

// This program, invoked via `crx_build_action out zip key` constructs a CRX3 at
// `out` from the input zip archive at `zip` and signed with the key at `key`.
// The file at `key` should be a DER-formatted PKCS #8 PrivateKeyInfo block.
//
// Consult crx3.gni for more information.
int main(int argc, char* argv[]) {
  std::string key_file;
  if (!base::ReadFileToString(
          base::MakeAbsoluteFilePath(base::FilePath::FromASCII(argv[3])),
          &key_file)) {
    VLOG(0) << "Failed to read key material from " << argv[3];
    return -1;
  }
  return static_cast<int>(crx_file::Create(
      base::FilePath::FromASCII(argv[1]), base::FilePath::FromASCII(argv[2]),
      crypto::RSAPrivateKey::CreateFromPrivateKeyInfo(
          std::vector<uint8_t>(key_file.begin(), key_file.end()))
          .get()));
}