RFR: 8370126: Improve jpackage signing testing

[Alexander Matveev]

On Tue, 21 Oct 2025 00:55:48 GMT, Alexey Semenyuk <asemenyuk at openjdk.org> wrote:

>> It always fails for me. This is an unsigned bundle, and we never checked the signature of unsigned bundles before this fix in the tests.
>
> Looks like this is antivirus blocking access to the main launcher:
> 
> $ /usr/bin/codesign --verify --strict --verbose=2 /Applications/AppContentTest.app/Contents/MacOS/AppContentTest
> /Applications/AppContentTest.app/Contents/MacOS/AppContentTest: Permission denied
> $ /usr/bin/codesign --verify --strict --verbose=2 /Applications/AppContentTest.app/Contents/runtime/Contents/MacOS/libjli.dylib
> /Applications/AppContentTest.app/Contents/runtime/Contents/MacOS/libjli.dylib: valid on disk
> /Applications/AppContentTest.app/Contents/runtime/Contents/MacOS/libjli.dylib: satisfies its Designated Requirement
> 
> 
> I tried to run the main launcher:
> 
> $ /Applications/AppContentTest.app/Contents/MacOS/AppContentTest
> Killed: 9
> 
> 
> Next attempt - it is gone. Got deleted by Crowdstrike 100% 
> 
> $ /Applications/AppContentTest.app/Contents/MacOS/AppContentTest
> -bash: /Applications/AppContentTest.app/Contents/MacOS/AppContentTest: No such file or directory

Thanks for explanation. I think it can be related to recent issue on macOS 15.5 and up when application bundles installed with PKG cannot be overwritten by application bundles from DMG with drag and drop command. I can see by provided log that you refer to applications installed with PKG since they under root user.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27875#discussion_r2446483685