<div dir="auto">That may be the case, but I'm betting most people will download it through a browser. It would be nice for there at least to be a note somewhere indicating how to deal with this. Maybe this thread is the note.</div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Sep 23, 2025, 15:00 Philip Race <<a href="mailto:philip.race@oracle.com">philip.race@oracle.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>

  
  <div>
    Vladimir used curl. I suspect you downloaded via the browser.<br>
    So in your case macOS treated it as untrusted content.<br>
    <br>
    But macOS doesn't know about curl downloads so treated it the same
    as locally generated binaries - no need to notarize.<br>
    <br>
    I'm pretty sure of this since I tried both and with Safari saw what
    you saw and with curl macOS was happy to run it immediately.<br>
    <br>
    -phil.<br>
    <br>
    <br>
    <div>On 9/23/25 11:11 AM, Charles Oliver
      Nutter wrote:<br>
    </div>
    <blockquote type="cite">
      
      <div dir="ltr">It does seem to be related to signing. Your xattr
        command line appears to have fixed the issue.
        <div><br>
        </div>
        <div>Perhaps Vladimir K has more permissive settings?</div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Tue, Sep 23, 2025 at
          12:35 PM Philip Race <<a href="mailto:philip.race@oracle.com" target="_blank" rel="noreferrer">philip.race@oracle.com</a>>
          wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div> Maybe lost its stapled notarization or some related
            problem ?<br>
            <br>
            Or somehow this bundle wasn't notarized ?<br>
            <br>
            If you are comfortable with trusting the bits try the
            following<br>
            <br>
            sudo xattr -r -d com.apple.quarantine jdk26.jdk<br>
            <br>
            -phil.<br>
            <br>
            <br>
            <div>On 9/23/25 8:30 AM, Charles Oliver Nutter wrote:<br>
            </div>
            <blockquote type="cite">
              <div dir="ltr">
                <div>The EA2 builds for macos aarch64 available at <a href="https://jdk.java.net/leyden/" target="_blank" rel="noreferrer">https://jdk.java.net/leyden/</a>
                  do not appear to be usable on my system running
                  "Sequoia" v15.6.1. The dialog that pops up says:</div>
                <div><br>
                </div>
                <div>```</div>
                <div>"jdk26.jdk" is damaged and can't be opened. You
                  should move it to the trash</div>
                <div>```</div>
                <div><br>
                </div>
                <div>I can build it myself if necessary, but this will
                  hinder others wanting to try the AOT code caching on
                  macos.</div>
                <div><br>
                </div>
                <div>
                  <div dir="ltr" class="gmail_signature">
                    <div dir="ltr"><b>Charles Oliver Nutter</b>
                      <div><i>Architect and Technologist</i></div>
                      <div>Headius Enterprises</div>
                      <a href="https://www.headius.com" target="_blank" rel="noreferrer">https://www.headius.com</a>
                      <div>
                        <div><a href="mailto:headius@headius.com" target="_blank" rel="noreferrer">headius@headius.com</a></div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </blockquote>
            <br>
          </div>
        </blockquote>
      </div>
    </blockquote>
    <br>
  </div>

</blockquote></div>