EA2 macos build "damaged and can't be opened"

[Philip Race]

I am not disagreeing. Hopefully whoever prepares the leyden EA binaries 
is reading this and will check it out.

-phil.

On 9/23/25 2:19 PM, Charles Oliver Nutter wrote:
> That may be the case, but I'm betting most people will download it 
> through a browser. It would be nice for there at least to be a note 
> somewhere indicating how to deal with this. Maybe this thread is the note.
>
> On Tue, Sep 23, 2025, 15:00 Philip Race <philip.race at oracle.com> wrote:
>
>     Vladimir used curl. I suspect you downloaded via the browser.
>     So in your case macOS treated it as untrusted content.
>
>     But macOS doesn't know about curl downloads so treated it the same
>     as locally generated binaries - no need to notarize.
>
>     I'm pretty sure of this since I tried both and with Safari saw
>     what you saw and with curl macOS was happy to run it immediately.
>
>     -phil.
>
>
>     On 9/23/25 11:11 AM, Charles Oliver Nutter wrote:
>>     It does seem to be related to signing. Your xattr command line
>>     appears to have fixed the issue.
>>
>>     Perhaps Vladimir K has more permissive settings?
>>
>>     On Tue, Sep 23, 2025 at 12:35 PM Philip Race
>>     <philip.race at oracle.com> wrote:
>>
>>         Maybe lost its stapled notarization or some related problem ?
>>
>>         Or somehow this bundle wasn't notarized ?
>>
>>         If you are comfortable with trusting the bits try the following
>>
>>         sudo xattr -r -d com.apple.quarantine jdk26.jdk
>>
>>         -phil.
>>
>>
>>         On 9/23/25 8:30 AM, Charles Oliver Nutter wrote:
>>>         The EA2 builds for macos aarch64 available at
>>>         https://jdk.java.net/leyden/ do not appear to be usable on
>>>         my system running "Sequoia" v15.6.1. The dialog that pops up
>>>         says:
>>>
>>>         ```
>>>         "jdk26.jdk" is damaged and can't be opened. You should move
>>>         it to the trash
>>>         ```
>>>
>>>         I can build it myself if necessary, but this will hinder
>>>         others wanting to try the AOT code caching on macos.
>>>
>>>         *Charles Oliver Nutter*
>>>         /Architect and Technologist/
>>>         Headius Enterprises
>>>         https://www.headius.com
>>>         headius at headius.com
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/leyden-dev/attachments/20250924/d461ae0f/attachment.htm>