Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8243673

Mac signing process should not use --deep arg.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: 14
    • Fix Version/s: 15
    • Component/s: tools
    • Labels:
    • Subcomponent:
    • Resolved In Build:
      b21
    • OS:
      os_x

      Description

      It is recommended to avoid using --deep arg when signing content on the mac.
      It is best to sign all libraries and executables separately before signing the main application and/or Framework.

      jpackage does sign each item seperately, but still uses the --deep arg when signing the runtime or the app as a whole.

      Testing shows that all signing jpackage types can be notarized without using the --deep arg when signing, so it should be removed.

        Attachments

          Activity

            People

            Assignee:
            herrick Andy Herrick
            Reporter:
            herrick Andy Herrick
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: