Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8235585

Enable macOS codesigning for all libraries and executables

    XMLWordPrintable

Details

    • b27
    • os_x

    Backports

      Description

        The Apple notarization process requires all executables and libraries to be codesigned with hardened runtime and secure timestamps enabled.
        Instead of only codesigning a specific set of launchers, all binaries produced by the OpenJDK build need to be codesigned.

        In order to pass the notarization process a certain set of entitlements have to be set for the OpenJDK. These entitlements should be used in the OpenJDK build during codesigning.

        Additionally it should be possible to set the codesigning identity to be used during configure instead of supporting only a hard coded “openjdk_codesign” identity.

        Attachments

          Issue Links

            Activity

              People

                goetz Goetz Lindenmaier
                goetz Goetz Lindenmaier
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: