[11u] RFR: 8238534: Deep sign macOS bundles before bundle archive is being created

[Langer, Christoph]

Hi René,

thanks for doing the 11u backport of this. The patch looks good. I'll sponsor this for you.

Best regards
Christoph

> -----Original Message-----
> From: jdk-updates-dev <jdk-updates-dev-bounces at openjdk.java.net> On
> Behalf Of René Schünemann
> Sent: Donnerstag, 20. Februar 2020 12:49
> To: jdk-updates-dev at openjdk.java.net
> Subject: [11u] RFR: 8238534: Deep sign macOS bundles before bundle archive
> is being created
> 
> Hi,
> 
> I would like to downport 8238534 to jdk11u. This change does the code
> signing of the complete JDK/JRE bundle an therefore provides all the
> necessary code signing prerequisites which are needed for the Apple
> notarization.
> 
> I had to do a minor adjustment for jdk11 since the "isTargetOs" macro
> is not working in jdk11
> 
> Line 227:
> 
> -    ifeq ($(call isTargetOs, macosx)+$(DEBUG_LEVEL), true+release)
> +   ifeq ($(OPENJDK_TARGET_OS)-$(DEBUG_LEVEL), macosx-release)
> 
> https://bugs.openjdk.java.net/browse/JDK-8238534
> https://hg.openjdk.java.net/jdk/jdk/rev/6f40f03179f9
> http://cr.openjdk.java.net/~rschuenemann/wr/2020/8238534-
> macos_sign_bundles-jdk11u/01
> 
> Rene