<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br><div><br><blockquote type="cite"><div>On Oct 6, 2023, at 6:31 PM, Alexander Matveev <almatvee@openjdk.org> wrote:</div><br class="Apple-interchange-newline"><div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">CSR [JDK-8316631](</span><a href="https://bugs.openjdk.org/browse/JDK-8316631" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://bugs.openjdk.org/browse/JDK-8316631</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">).</span></div></blockquote><br></div><div><blockquote type="cite"><span style="caret-color: rgb(23, 43, 77); color: rgb(23, 43, 77); font-family: "DejaVu Sans", sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);">We will not do any validations of certificates in this case like we do with </span><code class="prettyprint" style="font-family: SFMono-Medium, "SF Mono", "Segoe UI Mono", "Roboto Mono", "Ubuntu Mono", Menlo, Courier, monospace; caret-color: rgb(23, 43, 77); color: rgb(23, 43, 77); font-size: 14px;">--mac-signing-key-user-name</code><span style="caret-color: rgb(23, 43, 77); color: rgb(23, 43, 77); font-family: "DejaVu Sans", sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);"> or we will not check if produced application image or installer got signed correctly. </span></blockquote><br></div><div>Again, a suggestion might be to do a codesign verify. For example…</div><div><br></div><div>codesign -v --verbose=4 outputdir/HalfPipe.app</div><div><br></div><div>man codesign</div><div><div>-v, --verify</div><div> Requests verification of code signatures. If other actions (sign, display, etc.) are also requested, -v is interpreted to mean --verbose.</div></div><div><br></div><div>Doing this might allow to fail if errors are indicated or at least provide information maybe on verbose runs if there seem to be problems.</div><br></body></html>