The codesign utility prints a warning if it replaces an existing signature, something it will always do on aarch64 where the linker adds an unavoidable default "adhoc" signature. The best way I could find to get around this was to explicitly remove any existing signature before attempting to sign.
------------- Commit messages: - JDK-8293550 Changes: https://git.openjdk.org/jdk/pull/10315/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=10315&range=00 Stats: 5 lines in 1 file changed: 4 ins; 0 del; 1 mod Patch: https://git.openjdk.org/jdk/pull/10315.diff Fetch: git fetch https://git.openjdk.org/jdk pull/10315/head:pull/10315 PR: https://git.openjdk.org/jdk/pull/10315