💄 (microsoft#234417)

Author: joaomoreno

build/azure-pipelines/common/sign.js

@@ -140,11 +140,12 @@ export function main([esrpCliPath, type, folderPath, pattern]: string[]) {
 
 	const key = crypto.randomBytes(32);
 	const iv = crypto.randomBytes(16);
+	const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);
+	const encryptedToken = cipher.update(process.env['SYSTEM_ACCESSTOKEN']!.trim(), 'utf8', 'hex') + cipher.final('hex');
+
 	const encryptionDetailsPath = tmp.tmpNameSync();
 	fs.writeFileSync(encryptionDetailsPath, JSON.stringify({ key: key.toString('hex'), iv: iv.toString('hex') }));
 
-	const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);
-	const encryptedToken = cipher.update(process.env['SYSTEM_ACCESSTOKEN']!.trim(), 'utf8', 'hex') + cipher.final('hex');
 	const encryptedTokenPath = tmp.tmpNameSync();
 	fs.writeFileSync(encryptedTokenPath, encryptedToken);