<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
Hi Abhinay,<br>
<br>
Thank you for evaluating the issue! I've updated JDK-8358723 CR with
you finding.<br>
<br>
Can you try another fix? Instead of removing `.entitlements(null)`
from `signingCfgWithoutEntitlements` object, can you replace<br>
---<br>
final var codesignDir =
Codesign.build(signingCfgWithoutEntitlements::toCodesignArgs).force(true).create().asConsumer();<br>
---<br>
<br>
with<br>
---<br>
final var codesignDir =
Codesign.build(signingCfg::toCodesignArgs).force(true).create().asConsumer();<br>
---<br>
at [1]?<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://github.com/openjdk/jdk25u/blame/e90d54198d4310830c3a970dbe2bc883c67867f8/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java#L232">https://github.com/openjdk/jdk25u/blame/e90d54198d4310830c3a970dbe2bc883c67867f8/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java#L232</a><br>
<br>
- Alexey<br>
<br>
<div class="moz-cite-prefix">On 9/24/2025 3:02 AM, Abhinay Agarwal
wrote:<br>
</div>
<blockquote type="cite" cite="mid:CC8B17DC-44F0-4D9E-8913-9B05EA765F7C@gluonhq.com">
Hi Alexey,
<div><br>
</div>
<div>I have tried jpackge from JDK 17/21/24 and applications
generated from all of them work fine.</div>
<div><br>
</div>
<div>Removing `.entitlements(null)` from this particular line
fixes the issue in JDK25:</div>
<div><a href="https://urldefense.com/v3/__https://github.com/openjdk/jdk25u/blame/master/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java*L228__;Iw!!ACWV5N9M2RV99hQ!PC580bqSgm0DSEYJIWVtP1JJyEyRCV2cXpzKR-a_Z3CZmjEdtg0FAGGm1NC8ILpr4ds6xWIifHfQqdsp_uy5Yi-xfcGAxi5gvw$" moz-do-not-send="true">https://github.com/openjdk/jdk25u/blame/master/src/jdk.jpackage/macosx/classes/jdk/jpackage/internal/AppImageSigner.java#L228</a></div>
<div><br>
</div>
<div>- Abhinay<br id="lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On 23 Sep 2025, at 21:46, Alexey Semenyuk
<a class="moz-txt-link-rfc2396E" href="mailto:alexey.semenyuk@oracle.com"><alexey.semenyuk@oracle.com></a> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div>Hi Abhinay,<br>
<br>
On 9/23/2025 4:22 AM, Abhinay Agarwal wrote:<br>
<blockquote type="cite">We created a DMG package for
Scene Builder [1] using jpackage in JDK 25.<br>
After installing the app, we found that with the
recent changes [2] introduced in jpackage,<br>
it no longer adds the default entitlements to the
macOS builds. As a result, SceneBuilder.app crashes
during startup.<br>
We even tried adding explicit entitlements using
`--mac-entitlements`, but to no avail.<br>
</blockquote>
This is likely to be the issue [1]. I believe it is not
JDK 25-specific, though; it should affect all versions
of jpackage starting from JDK 17. Can you try a jpackage
from jdk21 or jdk17 to prove me wrong?<br>
<br>
<blockquote type="cite"><br>
Furthermore, we discovered that the
`--mac-package-signing-prefix` flag now requires the
prefix to end with a `.`,<br>
which wasn’t the case earlier.<br>
</blockquote>
The prefix value should end with a `.`. See [2]. Prior
to jdk25 jpackage didn't validate the value of the
prefix.<br>
<br>
[1] <a href="https://bugs.openjdk.org/browse/JDK-8358723" moz-do-not-send="true" class="moz-txt-link-freetext">https://bugs.openjdk.org/browse/JDK-8358723</a><br>
[2] <a href="https://docs.oracle.com/en/java/javase/17/jpackage/support-application-features.html#GUID-8D9F0607-91F4-4070-8823-02FCAB12238D" moz-do-not-send="true" class="moz-txt-link-freetext">https://docs.oracle.com/en/java/javase/17/jpackage/support-application-features.html#GUID-8D9F0607-91F4-4070-8823-02FCAB12238D</a><br>
<br>
- Alexey<br>
<br>
<blockquote type="cite"><br>
- Abhinay<br>
<br>
[1] <a href="https://urldefense.com/v3/__https://github.com/gluonhq/scenebuilder__;!!ACWV5N9M2RV99hQ!PC580bqSgm0DSEYJIWVtP1JJyEyRCV2cXpzKR-a_Z3CZmjEdtg0FAGGm1NC8ILpr4ds6xWIifHfQqdsp_uy5Yi-xfcGTA486Qw$" moz-do-not-send="true">https://github.com/gluonhq/scenebuilder</a><br>
[2] <a href="https://bugs.openjdk.org/browse/JDK-8333664" moz-do-not-send="true" class="moz-txt-link-freetext">https://bugs.openjdk.org/browse/JDK-8333664</a>
<br>
</blockquote>
<br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</body>
</html>