<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
Vladimir used curl. I suspect you downloaded via the browser.<br>
So in your case macOS treated it as untrusted content.<br>
<br>
But macOS doesn't know about curl downloads so treated it the same
as locally generated binaries - no need to notarize.<br>
<br>
I'm pretty sure of this since I tried both and with Safari saw what
you saw and with curl macOS was happy to run it immediately.<br>
<br>
-phil.<br>
<br>
<br>
<div class="moz-cite-prefix">On 9/23/25 11:11 AM, Charles Oliver
Nutter wrote:<br>
</div>
<blockquote type="cite" cite="mid:CAE-f1xRzbTL6UHEnjp+vfT2=NX0cBryduVpwbvYn7fMSEJOEYQ@mail.gmail.com">
<div dir="ltr">It does seem to be related to signing. Your xattr
command line appears to have fixed the issue.
<div><br>
</div>
<div>Perhaps Vladimir K has more permissive settings?</div>
</div>
<br>
<div class="gmail_quote gmail_quote_container">
<div dir="ltr" class="gmail_attr">On Tue, Sep 23, 2025 at
12:35 PM Philip Race <<a href="mailto:philip.race@oracle.com" moz-do-not-send="true" class="moz-txt-link-freetext">philip.race@oracle.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div> Maybe lost its stapled notarization or some related
problem ?<br>
<br>
Or somehow this bundle wasn't notarized ?<br>
<br>
If you are comfortable with trusting the bits try the
following<br>
<br>
sudo xattr -r -d com.apple.quarantine jdk26.jdk<br>
<br>
-phil.<br>
<br>
<br>
<div>On 9/23/25 8:30 AM, Charles Oliver Nutter wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>The EA2 builds for macos aarch64 available at <a href="https://jdk.java.net/leyden/" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://jdk.java.net/leyden/</a>
do not appear to be usable on my system running
"Sequoia" v15.6.1. The dialog that pops up says:</div>
<div><br>
</div>
<div>```</div>
<div>"jdk26.jdk" is damaged and can't be opened. You
should move it to the trash</div>
<div>```</div>
<div><br>
</div>
<div>I can build it myself if necessary, but this will
hinder others wanting to try the AOT code caching on
macos.</div>
<div><br>
</div>
<div>
<div dir="ltr" class="gmail_signature">
<div dir="ltr"><b>Charles Oliver Nutter</b>
<div><i>Architect and Technologist</i></div>
<div>Headius Enterprises</div>
<a href="https://www.headius.com" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.headius.com</a>
<div>
<div><a href="mailto:headius@headius.com" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">headius@headius.com</a></div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
</blockquote>
<br>
</body>
</html>