workaround for codesigning on Mac baseline - do jnilibs first

as otherwise signing fails (LibreOffice.app: code object is not signed at all
In subcomponent: path/to/foo.jnilib)

Change-Id: I3e4691f2ada408d9e76d200a3291b044753ec85c

solenv/bin/macosx-codesign-app-bundle

@@ -31,10 +31,19 @@ else
     # We then want to sign data files, too, hmm.
     other_files="\
  -or -name '*.fodt' -or -name 'schema.strings' -or -name 'schema.xml' \
- -or -name '*.jar' -or -name '*.jnilib' -or -name 'LICENSE' -or -name 'LICENSE.html' \
+ -or -name '*.jar' -or -name 'LICENSE' -or -name 'LICENSE.html' \
  -or -name '*.applescript' -or -name '*.odt'"
 fi
 
+# Sign jnilibs first as workaround for signing issue on old baseline
+# order matters/screws things up otherwise
+find -d "$APP_BUNDLE" \( -name '*.jnilib' \) ! -type l |
+    while read file; do
+    echo "signing $file"
+    id=`echo ${file#${APP_BUNDLE}/Contents/} | sed -e 's,/,.,g'`
+    codesign --verbose --identifier=$MACOSX_BUNDLE_IDENTIFIER.$id --sign "$MACOSX_CODESIGNING_IDENTITY" "$file" || exit 1
+done
+
 # Sign dylibs
 #
 # The dylibs in the Python framework are called *.so. Go figure