Hi all,
I noticed an issue with the latest JavaFX JAR files on Maven (v26.0.1)
regarding the macOS notarization process.
When I use JavaFX v25.0.1, I can notarize my DMG file using Apple's
notarytool without issue. However, after updating my dependencies to
v26.0.1, the notarization process fails with a status of "Invalid." (see
full log below)
The notarytool log indicates that the errors originate from the JavaFX
files. When I revert the dependencies to v25.0.1, the process succeeds
again with a status of "Accepted."
Is it possible that the v26.0.1 artifacts on Maven were not properly
signed, or is there another reason for this behavior?
Where is the right place to report this problem?
Thanks,
-- Daniel
#### "notarytool log" output (unnecessary information indicated by dots)
{
"logFormatVersion": 1,
"jobId": "...",
"status": "Invalid",
"statusSummary": "Archive contains critical validation errors",
"statusCode": 4000,
"archiveFilename": "myAPP-26.05.14.dmg",
"uploadDate": "2026-05-14T16:31:54.627Z",
"sha256": "...",
"ticketContents": null,
"issues": [
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib",
"message": "The binary is not signed.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
",
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path":
"myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": "
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
",
"architecture": "x86_64"
}
]
}
