Re: [External] : Re: jpackage MacOS Notarization

2021-08-04 Thread Daniel Peintner
Hi Andy, The problem is you are signing the pkg but building it from an unsigned > app-image. > > If you are building in two phases (app-image, then installer package) you > need the --mac-sign option on both phases. > Thank you very much. It resolved the problem (I wasn't aware that --mac-sign

Re: [External] : Re: jpackage MacOS Notarization

2021-08-03 Thread Andy Herrick
OK - took me a while to see what you are doing. The problem is you are signing the pkg but building it from an unsigned app-image. If you are building in two phases (app-image, then installer package) you need the --mac-sign option on both phases. /Andy On 8/3/2021 10:37 AM, Andy Herrick

Re: [External] : Re: jpackage MacOS Notarization

2021-08-03 Thread Andy Herrick
I was having problems notarizing anything yesterday, but fixed them today. I can notarize my own test - but get failure when trying to notarize your app as built from non-modular branch of https://github.com/danielpeintner/Java11Test/ am looking into it ... /Andy On 8/2/2021 9:57 AM,

Re: [External] : Re: jpackage MacOS Notarization

2021-08-02 Thread Daniel Peintner
Hi Andy, > sorry - code looks for certificate key starting with: "Developer ID > Application: " + in order to not > have to put full user name in. I missed that that with null user name that > causes it to look for anything starting with "Developer ID Application: " > (same thing with

Re: [External] : Re: jpackage MacOS Notarization

2021-07-29 Thread Andy Herrick
sorry - code looks for certificate key starting with: "Developer ID Application: " + in order to not have to put full user name in.  I missed that that with null user name that causes it to look for anything starting with "Developer ID Application: " (same thing with "Developer ID Installer:

Re: [External] : Re: jpackage MacOS Notarization

2021-07-29 Thread Daniel Peintner
Hi Andy, Since I don't know your setup I did not put anything there. '--mac-sign' is enough to use the defaults in my setup. It looks for the signing keys installed on my machine that start with "Developer ID Application " similar to '--mac-signing-key-user-name', 'Developer ID Application: '

Re: [External] : Re: jpackage MacOS Notarization

2021-07-29 Thread Andy Herrick
The 'build.gradle' in this branch has --mac-signing-key-user-name commented out.     installerOptions += [     '--mac-sign',     // '--mac-s'SIGNING_KEY_USER_NAME'igning-key-user-name', System.getenv('SIGNING_KEY_USER_NAME'),     //

Re: jpackage MacOS Notarization

2021-07-29 Thread Daniel Peintner
Kevin, Andy, Thanks for your quick response. Full support for notarization in jpackage was added in JDK 17. Can you > try an early access build of JDK 17 [1] and see if that works for you? > I did try JDK17-ea-32 also with the same result. Since I do understand it is difficult reproduce the

Re: jpackage MacOS Notarization

2021-07-28 Thread Andy Herrick
Not really enough info given here to act on.  Exactly what java version/build are you using?   As Kevin suggested it best to try JDK17 EA first, but I can notarize simple test app with JDK16 , staple the notarization, and then download it and run it on other machines without the quarantine

Re: jpackage MacOS Notarization

2021-07-28 Thread Kevin Rushforth
Full support for notarization in jpackage was added in JDK 17. Can you try an early access build of JDK 17 [1] and see if that works for you? -- Kevin [1] https://jdk.java.net/17 On 7/28/2021 8:27 AM, Daniel Peintner wrote: All, I am trying to notarize an app (built with jpackage) for

jpackage MacOS Notarization

2021-07-28 Thread Daniel Peintner
All, I am trying to notarize an app (built with jpackage) for MacOS. jpackage at first *seems* to properly sign all resources with the available --mac-sign options et cetera. Having said that, there are still remaining issues 1. The app cannot be properly installed (without hacks like xattr