Re: RFR: 8293965: Code signing warnings after JDK-8293550

2022-09-16 Thread Mikael Vidstedt
On Fri, 16 Sep 2022 21:39:39 GMT, Erik Joelsson wrote: > The codesign utility prints a warning if it replaces an existing signature, > something it will always do on aarch64 where the linker adds an unavoidable > default "adhoc" signature. The best way I could find to get around this was > to

RFR: JDK-8293965

2022-09-16 Thread Erik Joelsson
The codesign utility prints a warning if it replaces an existing signature, something it will always do on aarch64 where the linker adds an unavoidable default "adhoc" signature. The best way I could find to get around this was to explicitly remove any existing signature before attempting to sig

Integrated: 8293550: Optionally add get-task-allow entitlement to macos binaries

2022-09-16 Thread Erik Joelsson
On Wed, 14 Sep 2022 20:25:03 GMT, Erik Joelsson wrote: > When signing Macos binaries, it's possible to add various entitlements. We > already do this for things that Java and the JDK needs when actually signing > the binaries. > > There is a special entitlement "com.apple.security.get-task-all

Re: RFR: 8293550: Optionally add get-task-allow entitlement to macos binaries [v6]

2022-09-16 Thread Erik Joelsson
On Thu, 15 Sep 2022 23:17:39 GMT, Erik Joelsson wrote: >> When signing Macos binaries, it's possible to add various entitlements. We >> already do this for things that Java and the JDK needs when actually signing >> the binaries. >> >> There is a special entitlement "com.apple.security.get-tas

Re: RFR: 8293550: Optionally add get-task-allow entitlement to macos binaries [v6]

2022-09-16 Thread Magnus Ihse Bursie
On Thu, 15 Sep 2022 23:17:39 GMT, Erik Joelsson wrote: >> When signing Macos binaries, it's possible to add various entitlements. We >> already do this for things that Java and the JDK needs when actually signing >> the binaries. >> >> There is a special entitlement "com.apple.security.get-tas