RFR: 8358723: jpackage signing issues: the main launcher doesn't have entitlements

Alexey Semenyuk asemenyuk at openjdk.org
Fri Sep 26 00:24:23 UTC 2025


Fix the regression introduced by [JDK-8333664](https://bugs.openjdk.org/browse/JDK-8333664) that jpackage was not using entitlements when signing directories. This gave the main launcher no entitlements.

Additionally, enhance `jdk.jpackage.internal.util.PListReader` class.

Test code will verify that all launchers have the entitlements when `--mac-sign` is used or when a predefined app image is signed.

Ensured signing tests failed without the fix to `AppImageSigner.java` and that they passed with the fix.

-------------

Commit messages:
 - Strip trailing whitespace
 - Follow up to PListReader changes
 - PListReader: add queryDictValue(); update javadoc
 - Add extra test cases
 - Applied blessed-modifier-order.sh
 - Update PListReader
 - Need to access jdk.jpackage/jdk.jpackage.internal.resources.ResourceLocator from tests
 - Verify launchers have entitlements when app is signed.
 - Enhance PListReader
 - Enhance PListReader.

Changes: https://git.openjdk.org/jdk/pull/27493/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=27493&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8358723
  Stats: 610 lines in 10 files changed: 547 ins; 8 del; 55 mod
  Patch: https://git.openjdk.org/jdk/pull/27493.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27493/head:pull/27493

PR: https://git.openjdk.org/jdk/pull/27493


More information about the core-libs-dev mailing list