Verify Adobe AIR code signing certificate

air-cert-dates.sh

#!/bin/bash

# Usage: ./air-cert-dates.sh /path/to/app.air

signatures="$(unzip -p "$1" META-INF/signatures.xml)"

xpath '//Signature[@Id="PackageSignature"]//X509Certificate[1]/text()' <<< "$signatures" 2>/dev/null \
  | sed -e $'1s/^/-----BEGIN CERTIFICATE-----\\\n/;$s/$/\\\n-----END CERTIFICATE-----/' \
  | openssl x509 -dates -noout \
  | sed -e $'1s/^/metric,date\\\n/;s/=/,/'

verify-air-cert.sh

#!/bin/bash

# Usage: ./verify-air-cert.sh /path/to/app.air

[ -e "$1/Contents" ] \
    && signatures="$(cat "$1/Contents/Resources/META-INF/signatures.xml")" \
    || signatures="$(unzip -p "$1" META-INF/signatures.xml)"

xpath '//Signature[@Id="PackageSignature"]//X509Certificate[1]/text()' <<< "$signatures" 2>/dev/null \
  | sed -e $'1s/^/-----BEGIN CERTIFICATE-----\\\n/;$s/$/\\\n-----END CERTIFICATE-----/' \
  | openssl x509 -text -noout