Alexander Veit created TIKA-4702:
------------------------------------

             Summary: Tika 3.3.0 breaks builds due to unsigned binaries
                 Key: TIKA-4702
                 URL: https://issues.apache.org/jira/browse/TIKA-4702
             Project: Tika
          Issue Type: Bug
          Components: tika-app, tika-server
    Affects Versions: 3.3.0
            Reporter: Alexander Veit


Tika 3.3.0 (server, app) is no longer compatible with macOS since the JAR 
contains unsigned binaries.

In builds this leads to the following failures:
{code:java}
  "issues": [
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-app-3.3.0.jar/darwin/aarch64/libzstd-jni-1.5.7-4.dylib",
      "message": "The binary is not signed with a valid Developer ID 
certificate.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721";,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-app-3.3.0.jar/darwin/aarch64/libzstd-jni-1.5.7-4.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733";,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-app-3.3.0.jar/darwin/x86_64/libzstd-jni-1.5.7-4.dylib",
      "message": "The binary is not signed.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarizat
ion_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-app-3.3.0.jar/darwin/x86_64/libzstd-jni-1.5.7-4.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733";,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-server-standard-3.3.0.jar/darwin/aarch64/libzstd-jni-1.5.7-4.dylib",
      "message": "The binary is not signed with a valid Developer ID 
certificate.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721";,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-server-standard-3.3.0.jar/darwin/aarch64/libzstd-jni-1.5.7-4.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733";,
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-server-standard-3.3.0.jar/darwin/x86_64/libzstd-jni-1.5.7-4.dylib",
      "message": "The binary is not signed.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721";,
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": 
"foo/tika/tika-server-standard-3.3.0.jar/darwin/x86_64/libzstd-jni-1.5.7-4.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": 
"https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733";,
      "architecture": "x86_64"
    } {code}
The problem did not exist with Tika 3.2.3.

Signing the binaries should solve the issue.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to