EA2 macos build "damaged and can't be opened"

[Philip Race]

Vladimir used curl. I suspect you downloaded via the browser.
So in your case macOS treated it as untrusted content.

But macOS doesn't know about curl downloads so treated it the same as 
locally generated binaries - no need to notarize.

I'm pretty sure of this since I tried both and with Safari saw what you 
saw and with curl macOS was happy to run it immediately.

-phil.


On 9/23/25 11:11 AM, Charles Oliver Nutter wrote:
> It does seem to be related to signing. Your xattr command line appears 
> to have fixed the issue.
>
> Perhaps Vladimir K has more permissive settings?
>
> On Tue, Sep 23, 2025 at 12:35 PM Philip Race <philip.race at oracle.com> 
> wrote:
>
>     Maybe lost its stapled notarization or some related problem ?
>
>     Or somehow this bundle wasn't notarized ?
>
>     If you are comfortable with trusting the bits try the following
>
>     sudo xattr -r -d com.apple.quarantine jdk26.jdk
>
>     -phil.
>
>
>     On 9/23/25 8:30 AM, Charles Oliver Nutter wrote:
>>     The EA2 builds for macos aarch64 available at
>>     https://jdk.java.net/leyden/ do not appear to be usable on my
>>     system running "Sequoia" v15.6.1. The dialog that pops up says:
>>
>>     ```
>>     "jdk26.jdk" is damaged and can't be opened. You should move it to
>>     the trash
>>     ```
>>
>>     I can build it myself if necessary, but this will hinder others
>>     wanting to try the AOT code caching on macos.
>>
>>     *Charles Oliver Nutter*
>>     /Architect and Technologist/
>>     Headius Enterprises
>>     https://www.headius.com
>>     headius at headius.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/leyden-dev/attachments/20250923/0bcb05be/attachment.htm>