jpackage and macOS Catalina notarization

[Andy Herrick]

Further update:

     Good news. With the proper certs installed, I can notarize a pkg 
installer generated by jpackage (from JDK-15).  I have confirmed this 
works both with pkg that is built with one jpackage command, and with 
two a phase build (where an app-image is created by the first jpackage 
command, and then the pkg is built by second jpackage command using the 
--app-image option).

I will close JDK-8241451 as not an issue with proper evaluation.

/Andy

On 4/15/2020 2:48 PM, Andy Herrick wrote:
>
> Update on notarization of jpackage artifacts:
>
> Changes have been made (as part of JDK-8237490 
> <https://bugs.openjdk.java.net/browse/JDK-8237490>) that enable 
> notarization of dmg files and zipped app-images assembled and signed 
> using jpackage tool.
>
> Given that, the current package layout on mac will not be an obstacle 
> to notarization.
>
> The only reason "pkg" files (see JDK-8241451) are not included in that 
> list is I did not at that time have the required valid certificate 
> ("Developer ID: installer").
>
> I have just obtained access to the required certificate and should 
> soon be able to determine if the current code (in JDK-15) supports 
> notarizing 'pkg" type installers, or if other changes will be needed 
> as part of JDK-8241451.
>
> /Andy
>
> On 1/15/2020 2:05 PM, James Elliott wrote:
>> [Whoops, it seems that this list strips out image attachments, so my first attempt to send this message was pretty useless. Trying again, after uploading the screenshot to my web server so I can link to it instead.]
>>
>> Ok, thanks for clarifying that, I will drop my expectations for Catalina happiness for the moment, and perhaps can help make things work better when I have some time. Is there a pointer at how one gets vetted for submitting pull requests? Or I could just look at the source and post ideas here if that is better.
>>
>> For now, here is what a jpackage-created disk image looks like when I open it in Catalina:https://deepsymmetry.org/images/jpackage_dmg_screenshot.png
>>
>> The command that generates this is:
>> https://github.com/Deep-Symmetry/beat-link-trigger/blob/master/.github/scripts/build_dmg.zsh#L37-L42  <https://github.com/Deep-Symmetry/beat-link-trigger/blob/master/.github/scripts/build_dmg.zsh#L37-L42>
>>
>> There are no errors reported during the build
>>
>> Cheers,
>>
>> 	-James
>>
>>> Date: Wed, 15 Jan 2020 14:54:55 +0100
>>> From: Michael Paus <mp at jugs.org  <mailto:mp at jugs.org>>
>>> To:core-libs-dev at openjdk.java.net  <mailto:core-libs-dev at openjdk.java.net>
>>> Subject: Re: jpackage and macOS Catalina notarization
>>> Message-ID: <84d90e7b-fbc8-4be5-09a2-56457edf4e23 at jugs.org  <mailto:84d90e7b-fbc8-4be5-09a2-56457edf4e23 at jugs.org>>
>>> Content-Type: text/plain; charset=utf-8; format=flowed
>>>
>>>> I also notice that the background image and Applications folder alias that are supposed to be in the disk image don?t seem to work in Catalina, so I may give up on having jpackage create my disk images as well, and do that using native tools, until that can be fixed. (I realize it is in early access still, and hope these issues are being worked on.)
>>> What exactly is wrong with the background image? Were there any build
>>> errors reported during packaging?
>>>
>>> The creation of the disk image is done via some script and you can tell
>>> jpackage via the
>>> option --temp <some empty dir> to dump that into a temporary folder. You
>>> can modify it
>>> and place it into another folder which you tell jpackage via
>>> --resource-dir <some dir with the modified script>
>>> Maybe you can fix your issue that way or at least you can find out what
>>> the problem is.
>>>
>>> I am still on the previous version of macOS until all these Catalina
>>> issues are sorted out.
>>> Java/JavaFX on Catalina is a mess right now.