<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
Hi Abhinay,<br>
<br>
Thank you for confirmation! It clarifies the cause of the regression
in jdk25.<br>
<br>
- Alexey<br>
<br>
<div class="moz-cite-prefix">On 9/24/2025 1:54 PM, Abhinay Agarwal
wrote:<br>
</div>
<blockquote type="cite" cite="mid:CABi07ezdv0JneGb4Oj+84dm1v4c7PHuYYEYSTGQQKPgeWBK+tg@mail.gmail.com">
<div dir="ltr">
<div>Hi Alexey,</div>
<div><br>
</div>
<div>The fix works!</div>
<div><br>
</div>
<div>- Abhinay</div>
</div>
<br>
<div class="gmail_quote gmail_quote_container">
<div dir="ltr" class="gmail_attr">On Wed, Sep 24, 2025 at
7:48 PM Alexey Semenyuk <<a href="mailto:alexey.semenyuk@oracle.com" moz-do-not-send="true" class="moz-txt-link-freetext">alexey.semenyuk@oracle.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div> Hi Abhinay,<br>
<br>
Thank you for evaluating the issue! I've updated JDK-8358723
CR with you finding.<br>
<br>
Can you try another fix? Instead of removing
`.entitlements(null)` from `signingCfgWithoutEntitlements`
object, can you replace<br>
---<br>
final var codesignDir =
Codesign.build(signingCfgWithoutEntitlements::toCodesignArgs).force(true).create().asConsumer();<br>
---<br>
<br>
with<br>
---<br>
final var codesignDir =
Codesign.build(signingCfg::toCodesignArgs).force(true).create().asConsumer();<br>
---<br>
at [1]?<br>
<br>
[1]
<a href="https://urldefense.com/v3/__https://github.com/openjdk/jdk25u/blame/e90d54198d4310830c3a970dbe2bc883c67867f8/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java*L232__;Iw!!ACWV5N9M2RV99hQ!P_wyruHpntqECwmu3H0oQX1aS04kXReyWIBS6SxNbqAnfKy57L9IhhQ8EseYNnLeJJAYaD6d7YYZJ-aiXr6kqSzYfuJd_l3KEg$" target="_blank" moz-do-not-send="true">https://github.com/openjdk/jdk25u/blame/e90d54198d4310830c3a970dbe2bc883c67867f8/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java#L232</a><br>
<br>
- Alexey<br>
<br>
<div>On 9/24/2025 3:02 AM, Abhinay Agarwal wrote:<br>
</div>
<blockquote type="cite"> Hi Alexey,
<div><br>
</div>
<div>I have tried jpackge from JDK 17/21/24 and
applications generated from all of them work fine.</div>
<div><br>
</div>
<div>Removing `.entitlements(null)` from this particular
line fixes the issue in JDK25:</div>
<div><a href="https://urldefense.com/v3/__https://github.com/openjdk/jdk25u/blame/master/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java*L228__;Iw!!ACWV5N9M2RV99hQ!PC580bqSgm0DSEYJIWVtP1JJyEyRCV2cXpzKR-a_Z3CZmjEdtg0FAGGm1NC8ILpr4ds6xWIifHfQqdsp_uy5Yi-xfcGAxi5gvw$" target="_blank" moz-do-not-send="true">https://github.com/openjdk/jdk25u/blame/master/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java#L228</a></div>
<div><br>
</div>
<div>- Abhinay<br id="m_-4945082576568200421lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On 23 Sep 2025, at 21:46, Alexey Semenyuk <a href="mailto:alexey.semenyuk@oracle.com" target="_blank" moz-do-not-send="true"><alexey.semenyuk@oracle.com></a>
wrote:</div>
<br>
<div>
<div>Hi Abhinay,<br>
<br>
On 9/23/2025 4:22 AM, Abhinay Agarwal wrote:<br>
<blockquote type="cite">We created a DMG package
for Scene Builder [1] using jpackage in JDK
25.<br>
After installing the app, we found that with
the recent changes [2] introduced in jpackage,<br>
it no longer adds the default entitlements to
the macOS builds. As a result,
SceneBuilder.app crashes during startup.<br>
We even tried adding explicit entitlements
using `--mac-entitlements`, but to no avail.<br>
</blockquote>
This is likely to be the issue [1]. I believe it
is not JDK 25-specific, though; it should affect
all versions of jpackage starting from JDK 17.
Can you try a jpackage from jdk21 or jdk17 to
prove me wrong?<br>
<br>
<blockquote type="cite"><br>
Furthermore, we discovered that the
`--mac-package-signing-prefix` flag now
requires the prefix to end with a `.`,<br>
which wasn’t the case earlier.<br>
</blockquote>
The prefix value should end with a `.`. See [2].
Prior to jdk25 jpackage didn't validate the
value of the prefix.<br>
<br>
[1] <a href="https://bugs.openjdk.org/browse/JDK-8358723" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://bugs.openjdk.org/browse/JDK-8358723</a><br>
[2] <a href="https://docs.oracle.com/en/java/javase/17/jpackage/support-application-features.html#GUID-8D9F0607-91F4-4070-8823-02FCAB12238D" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://docs.oracle.com/en/java/javase/17/jpackage/support-application-features.html#GUID-8D9F0607-91F4-4070-8823-02FCAB12238D</a><br>
<br>
- Alexey<br>
<br>
<blockquote type="cite"><br>
- Abhinay<br>
<br>
[1] <a href="https://urldefense.com/v3/__https://github.com/gluonhq/scenebuilder__;!!ACWV5N9M2RV99hQ!PC580bqSgm0DSEYJIWVtP1JJyEyRCV2cXpzKR-a_Z3CZmjEdtg0FAGGm1NC8ILpr4ds6xWIifHfQqdsp_uy5Yi-xfcGTA486Qw$" target="_blank" moz-do-not-send="true">https://github.com/gluonhq/scenebuilder</a><br>
[2] <a href="https://bugs.openjdk.org/browse/JDK-8333664" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://bugs.openjdk.org/browse/JDK-8333664</a>
<br>
</blockquote>
<br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
</blockquote>
<br>
</body>
</html>