[ 
https://issues.apache.org/jira/browse/MNG-7172?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17362846#comment-17362846
 ] 

Konrad Windszus commented on MNG-7172:
--------------------------------------

As mentioned in 
https://issues.apache.org/jira/browse/MNG-7165?focusedCommentId=17362537&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17362537

{quote}...  temp files extracted from the JAR on demand don't suffer from that 
issue.{quote}

Apple's GateKeeper uses the file attribute {{com.apple.quarantine}} which is 
set on all files from an extracted archive downloaded via any browser.
This file attribute isn't set when the file is extracted from JAnsi itself in 
https://github.com/fusesource/jansi/blob/b7c7fbda5b19d5ad9f761e88bb06da8177cdc83e/src/main/java/org/fusesource/jansi/internal/JansiLoader.java#L178
 because that doesn't set the attribute {{com.apple.quarantine}}.

> Warning about signing of libjansi on macOS
> ------------------------------------------
>
>                 Key: MNG-7172
>                 URL: https://issues.apache.org/jira/browse/MNG-7172
>             Project: Maven
>          Issue Type: Improvement
>            Reporter: Maarten Mulders
>            Priority: Blocker
>         Attachments: mng-7172-1.jpg, mng-7172-2.jpg
>
>
> _(Copying from MNG-7165)_
>  
> With the latest SNAPSHOT (downloaded from 
> [https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven/job/master/169/artifact/org/apache/maven/apache-maven/4.0.0-alpha-1-SNAPSHOT/apache-maven-4.0.0-alpha-1-SNAPSHOT-bin.tar.gz])
>  I get
> {code:java}
> ./mvn --version
> Failed to load native library:libjansi.jnilib. osinfo: Mac/x86_64
> java.lang.UnsatisfiedLinkError: 
> /Users/konradwindszus/Downloads/apache-maven/lib/jansi-native/Mac/x86_64/libjansi.jnilib:
>  
> dlopen(/Users/konradwindszus/Downloads/apache-maven/lib/jansi-native/Mac/x86_64/libjansi.jnilib,
>  1): no suitable image found.  Did find:
>       
> /Users/konradwindszus/Downloads/apache-maven/lib/jansi-native/Mac/x86_64/libjansi.jnilib:
>  code signature in 
> (/Users/konradwindszus/Downloads/apache-maven/lib/jansi-native/Mac/x86_64/libjansi.jnilib)
>  not valid for use in process using Library Validation: library load 
> disallowed by system policy
> Apache Maven 4.0.0-alpha-1-SNAPSHOT (371faf7a49298bd1752632c2675aa499fee64667)
> Maven home: /Users/konradwindszus/Downloads/apache-maven
> Java version: 11.0.11, vendor: AdoptOpenJDK, runtime: 
> /Library/Java/JavaVirtualMachines/adoptopenjdk-11.jdk/Contents/Home
> Default locale: en_DE, platform encoding: UTF-8
> OS name: "mac os x", version: "11.4", arch: "x86_64", family: "mac"
> {code}
> And Mac OS shows a warning {{“libjansi.jnilib” cannot be opened because the 
> developer cannot be verified.}}.
>  Is the last version of JAnsi included in Maven properly signed?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to