Hi,

Starting with 26, the macos-specific jars in the maven artifacts were
signed with an ad-hoc certificate only. This happened because after
building the artifacts (and before uploading), tests were started, and the
task for running the tests first recreated the jars -- without the specific
signing. This is now fixed in our build/release procedures, so the next
27-ea should again have signed artifacts in maven central.

The SDK content has always been signed with a valid certificate. While
using maven is an excellent choice for development, I recommend using the
SDK content when bundling applications for production.

Apologies for the inconvenience.

- Johan

On Mon, May 18, 2026 at 5:00 PM Daniel Peintner <[email protected]>
wrote:

>  Hi Christopher and Johan,
>
> Thanks for looking into this and for the feedback.
>
> I retried just now.
>
> v26.0.1 → still not working
> v26 → also isn't working
> v25.0.1 → works for me again
>
> Hence, I assume it is not a temporary issue.
>
> Thanks,
>
> -- Daniel
>
>
> On Mon, May 18, 2026 at 3:16 PM Johan Vos <[email protected]> wrote:
>
> > Hi Daniel,
> >
> > Thanks for reporting -- we'll have a look and keep you/everyone posted
> > here.
> >
> > - Johan
> >
> > Op do 14 mei 2026 om 19:37 schreef Daniel Peintner <
> > [email protected]>:
> >
> >> Hi all,
> >>
> >> I noticed an issue with the latest JavaFX JAR files on Maven (v26.0.1)
> >> regarding the macOS notarization process.
> >>
> >> When I use JavaFX v25.0.1, I can notarize my DMG file using Apple's
> >> notarytool without issue. However, after updating my dependencies to
> >> v26.0.1, the notarization process fails with a status of "Invalid." (see
> >> full log below)
> >>
> >> The notarytool log indicates that the errors originate from the JavaFX
> >> files. When I revert the dependencies to v25.0.1, the process succeeds
> >> again with a status of "Accepted."
> >>
> >> Is it possible that the v26.0.1 artifacts on Maven were not properly
> >> signed, or is there another reason for this behavior?
> >>
> >> Where is the right place to report this problem?
> >>
> >> Thanks,
> >>
> >> -- Daniel
> >>
> >>
> >>
> >> #### "notarytool log" output (unnecessary information indicated by dots)
> >>
> >> {
> >>   "logFormatVersion": 1,
> >>   "jobId": "...",
> >>   "status": "Invalid",
> >>   "statusSummary": "Archive contains critical validation errors",
> >>   "statusCode": 4000,
> >>   "archiveFilename": "myAPP-26.05.14.dmg",
> >>   "uploadDate": "2026-05-14T16:31:54.627Z",
> >>   "sha256": "...",
> >>   "ticketContents": null,
> >>   "issues": [
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_iio.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_mtl.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libglass.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libjavafx_font.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_common.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_es2.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libdecora_sse.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-graphics-26.0.1-mac.jar/libprism_sw.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia_avf.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libglib-lite.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libfxplugins.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libgstreamer-lite.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-media-26.0.1-mac.jar/libjfxmedia.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib",
> >>       "message": "The binary is not signed.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721
> >> ",
> >>       "architecture": "x86_64"
> >>     },
> >>     {
> >>       "severity": "error",
> >>       "code": null,
> >>       "path":
> >>
> >>
> "myAPP-26.05.14.dmg/myAPP.app/Contents/app/javafx-web-26.0.1-mac.jar/libjfxwebkit.dylib",
> >>       "message": "The signature does not include a secure timestamp.",
> >>       "docUrl": "
> >>
> >>
> https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733
> >> ",
> >>       "architecture": "x86_64"
> >>     }
> >>   ]
> >> }
> >>
> >
>

Reply via email to