[External] : Re: RFR: 8293462: [macos] app image signature invalid when creating DMG or PKG from post processed signed image

Michael Hall mik3hall at gmail.com
Mon Oct 3 11:05:08 UTC 2022



> On Oct 2, 2022, at 8:36 AM, Michael Hall <mik3hall at gmail.com> wrote:
> 
> and a test that some changes can be made to the jdk itself and still get a valid signed application.

Alexander 

You may want to consider if this opens up a security vulnerability that doesn’t currently exist. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/core-libs-dev/attachments/20221003/4356c368/attachment-0001.htm>


More information about the core-libs-dev mailing list