-
Enhancement
-
Resolution: Fixed
-
P3
-
11, 14
-
b27
-
os_x
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8236297 | 15 | Christoph Langer | P3 | Resolved | Fixed | team |
| JDK-8247348 | 13.0.4 | Christoph Langer | P3 | Resolved | Fixed | b05 |
| JDK-8236549 | 11.0.7 | Christoph Langer | P3 | Resolved | Fixed | b01 |
| JDK-8236252 | 11.0.6 | Christoph Langer | P3 | Resolved | Fixed | b09 |
The Apple notarization process requires all executables and libraries to be codesigned with hardened runtime and secure timestamps enabled.
Instead of only codesigning a specific set of launchers, all binaries produced by the OpenJDK build need to be codesigned.
In order to pass the notarization process a certain set of entitlements have to be set for the OpenJDK. These entitlements should be used in the OpenJDK build during codesigning.
Additionally it should be possible to set the codesigning identity to be used during configure instead of supporting only a hard coded “openjdk_codesign” identity.
Instead of only codesigning a specific set of launchers, all binaries produced by the OpenJDK build need to be codesigned.
In order to pass the notarization process a certain set of entitlements have to be set for the OpenJDK. These entitlements should be used in the OpenJDK build during codesigning.
Additionally it should be possible to set the codesigning identity to be used during configure instead of supporting only a hard coded “openjdk_codesign” identity.
- backported by
-
JDK-8236252 Enable macOS codesigning for all libraries and executables
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
- relates to
-
-
- Resolved
-