FULL PRODUCT VERSION :
java version "9.0.4"
Java(TM) SE Runtime Environment (build 9.0.4+11)
Java HotSpot(TM) 64-Bit Server VM (build 9.0.4+11, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Darwin macbook.lan 17.4.0 Darwin Kernel Version 17.4.0: Sun Dec 17 09:19:54 PST 2017; root:xnu-4570.41.2~1/RELEASE_X86_64 x86_64

A DESCRIPTION OF THE PROBLEM :
I built an application image using the the fx:deploy ant task and set the signBundle attribute to false so it would not produce a code signature (since this does not appear to work)

With the signBundle attribute set to false, it builds the application image correctly, but when I attempt to sign the application using the codesign tool, it produces the following error (note: certificate details omitted):

codesign -s "<certificate details>" install_image/MotiveWave.app
install_image/MotiveWave.app: code object is not signed at all
In subcomponent: /Users/tonyl/workspace/MotiveWave/install/install_image/MotiveWave.app/Contents/MacOS/libpackager.dylib







STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Step 1: Build an application using the JavaFX ant packager tasks (you can just use the sample Hello World application for this). Set the nativeBundles attribute to "image" and add the signBundle attribute to false (see below):

    <fx:deploy nativeBundles="image" outdir="${install.dir}/install_image" outfile="MotiveWave">
      <fx:bundleargument arg="signBundle" value="false"/>
    
      <fx:runtime>
          <fx:add-modules value="java.activation"/>
      </fx:runtime>

      <fx:application refId="MotiveWaveApp"/>
      <fx:resources refId="jars"/>
     
      <fx:platform>
        <fx:jvmarg value="-Xmx1024m"/>
        <fx:jvmarg value="-Dprism.verbose=true"/>
        <fx:jvmarg value="-Dprism.maxvram=2048M"/>
        <fx:jvmarg value="-Dprism.targetvram=1024M"/>
        <fx:jvmarg value="-Djava.library.path=./lib"/>
      </fx:platform>
     
      <!-- request user level installation -->
      <fx:preferences install="false"/>
      <fx:info title="MotiveWave" vendor="MotiveWave Software" copyright="Copyright © 2018 MotiveWave Software">
         <fx:icon href="${images.dir}/mwave.icns"/>
      </fx:info>
    </fx:deploy>

Step 2: After building the application image, sign the application using the codesign tool:

codesign -s "<certificate details>" install_image/MotiveWave.app


EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
The application image should be signed correctly
ACTUAL -
codesign -s "<certificate details>" install_image/MotiveWave.app

install_image/MotiveWave.app: code object is not signed at all
In subcomponent: /Users/tonyl/workspace/MotiveWave/install/install_image/MotiveWave.app/Contents/MacOS/libpackager.dylib


REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
Use the HelloWorld sample from:
https://docs.oracle.com/javase/9/deploy/javafx-ant-tasks.htm#JSDPG177
---------- END SOURCE ----------

CUSTOMER SUBMITTED WORKAROUND :
no work around