Re: [jdk17] RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-09-09 Thread Alexey Semenyuk
On Thu, 9 Sep 2021 16:36:44 GMT, Andy Herrick wrote: > This is a backport from JDK-18 Marked as reviewed by asemenyuk (Reviewer). - PR: https://git.openjdk.java.net/jdk17/pull/305

[jdk17] RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-09-09 Thread Andy Herrick
This is a backport from JDK-18 - Commit messages: - JDK-8271868: Warn user when using mac-sign option with unsigned app-image. Changes: https://git.openjdk.java.net/jdk17/pull/305/files Webrev: https://webrevs.openjdk.java.net/?repo=jdk17&pr=305&range=00 Issue: https://bugs.

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread Alexander Matveev
On Thu, 5 Aug 2021 17:07:13 GMT, Andy Herrick wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > Andy Herrick has updated the pull request incrementally with one additional > commit since the last revision: > > JDK-8271868: Warn user when using mac-sign optio

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread danielpeintner
On Thu, 5 Aug 2021 17:07:13 GMT, Andy Herrick wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > Andy Herrick has updated the pull request incrementally with one additional > commit since the last revision: > > JDK-8271868: Warn user when using mac-sign optio

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread Andy Herrick
On Thu, 5 Aug 2021 17:07:13 GMT, Andy Herrick wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > Andy Herrick has updated the pull request incrementally with one additional > commit since the last revision: > > JDK-8271868: Warn user when using mac-sign optio

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread Alexey Semenyuk
On Thu, 5 Aug 2021 17:07:13 GMT, Andy Herrick wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > Andy Herrick has updated the pull request incrementally with one additional > commit since the last revision: > > JDK-8271868: Warn user when using mac-sign optio

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread Andy Herrick
On Thu, 5 Aug 2021 17:07:13 GMT, Andy Herrick wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > Andy Herrick has updated the pull request incrementally with one additional > commit since the last revision: > > JDK-8271868: Warn user when using mac-sign optio

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image. [v2]

2021-08-05 Thread Andy Herrick
> 8271868: Warn user when using mac-sign option with unsigned app-image. Andy Herrick has updated the pull request incrementally with one additional commit since the last revision: JDK-8271868: Warn user when using mac-sign option with unsigned app-image. - Changes: - all: http

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexey Semenyuk
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. My understanding of this enhancement is to warn user when app image created without --mac-sign is used in building a signed package. I.e. to warn user they misused --ma

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexander Matveev
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. First of all why we only want to cover case when app-image was produced without --mac-sign? If we want to cover such case only, then we need to use approach suggested b

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Andy Herrick
On Wed, 4 Aug 2021 20:56:46 GMT, Alexander Matveev wrote: >> 8271868: Warn user when using mac-sign option with unsigned app-image. > > src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/MacBaseInstallerBundler.java > line 142: > >> 140: // is not allready signed. >> 141:

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Andy Herrick
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. The purpose of this change is to catch the case (and emit a warning) when user creates an app-image w/o using --mac-sign, and then uses that app image to build a pkg or

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexey Semenyuk
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. What options exist for building a package from app image with invalid signature? - PR: https://git.openjdk.java.net/jdk/pull/5004

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexander Matveev
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. I think it will not work. User might modify app image after it was created and it will invalidate signature. - PR: https://git.openjdk.java.net/jdk/pull/50

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexey Semenyuk
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. What if we save "signed/not signed" flag in ".jpackage.xml" when building app image and read its value instead of guessing if they signed app image or not using `codesi

Re: RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Alexander Matveev
On Wed, 4 Aug 2021 20:00:37 GMT, Andy Herrick wrote: > 8271868: Warn user when using mac-sign option with unsigned app-image. Changes requested by almatvee (Reviewer). src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/MacAppImageBuilder.java line 877: > 875: try { > 876:

RFR: 8271868: Warn user when using mac-sign option with unsigned app-image.

2021-08-04 Thread Andy Herrick
8271868: Warn user when using mac-sign option with unsigned app-image. - Commit messages: - JDK-8271868: Warn user when using mac-sign option with unsigned app-image. - JDK-8271868: Warn user when using mac-sign option with unsigned app-image. - JDK-8271868: Warn user when using ma