<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body>
    I am not disagreeing. Hopefully whoever prepares the leyden EA
    binaries is reading this and will check it out.<br>
    <br>
    -phil.<br>
    <br>
    <div class="moz-cite-prefix">On 9/23/25 2:19 PM, Charles Oliver
      Nutter wrote:<br>
    </div>
    <blockquote type="cite" cite="mid:CAE-f1xT2WcZ-aJKrvxTPP0iWgs626invDZSPQZ69kDEJENejWw@mail.gmail.com">
      
      <div dir="auto">That may be the case, but I'm betting most people
        will download it through a browser. It would be nice for there
        at least to be a note somewhere indicating how to deal with
        this. Maybe this thread is the note.</div>
      <br>
      <div class="gmail_quote gmail_quote_container">
        <div dir="ltr" class="gmail_attr">On Tue, Sep 23, 2025, 15:00
          Philip Race <<a href="mailto:philip.race@oracle.com" moz-do-not-send="true" class="moz-txt-link-freetext">philip.race@oracle.com</a>>
          wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
          <div> Vladimir used curl. I suspect you downloaded via the
            browser.<br>
            So in your case macOS treated it as untrusted content.<br>
            <br>
            But macOS doesn't know about curl downloads so treated it
            the same as locally generated binaries - no need to
            notarize.<br>
            <br>
            I'm pretty sure of this since I tried both and with Safari
            saw what you saw and with curl macOS was happy to run it
            immediately.<br>
            <br>
            -phil.<br>
            <br>
            <br>
            <div>On 9/23/25 11:11 AM, Charles Oliver Nutter wrote:<br>
            </div>
            <blockquote type="cite">
              <div dir="ltr">It does seem to be related to signing. Your
                xattr command line appears to have fixed the issue.
                <div><br>
                </div>
                <div>Perhaps Vladimir K has more permissive settings?</div>
              </div>
              <br>
              <div class="gmail_quote">
                <div dir="ltr" class="gmail_attr">On Tue, Sep 23, 2025
                  at 12:35 PM Philip Race <<a href="mailto:philip.race@oracle.com" target="_blank" rel="noreferrer" moz-do-not-send="true" class="moz-txt-link-freetext">philip.race@oracle.com</a>>
                  wrote:<br>
                </div>
                <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
                  <div> Maybe lost its stapled notarization or some
                    related problem ?<br>
                    <br>
                    Or somehow this bundle wasn't notarized ?<br>
                    <br>
                    If you are comfortable with trusting the bits try
                    the following<br>
                    <br>
                    sudo xattr -r -d com.apple.quarantine jdk26.jdk<br>
                    <br>
                    -phil.<br>
                    <br>
                    <br>
                    <div>On 9/23/25 8:30 AM, Charles Oliver Nutter
                      wrote:<br>
                    </div>
                    <blockquote type="cite">
                      <div dir="ltr">
                        <div>The EA2 builds for macos aarch64 available
                          at <a href="https://jdk.java.net/leyden/" target="_blank" rel="noreferrer" moz-do-not-send="true" class="moz-txt-link-freetext">https://jdk.java.net/leyden/</a>
                          do not appear to be usable on my system
                          running "Sequoia" v15.6.1. The dialog that
                          pops up says:</div>
                        <div><br>
                        </div>
                        <div>```</div>
                        <div>"jdk26.jdk" is damaged and can't be opened.
                          You should move it to the trash</div>
                        <div>```</div>
                        <div><br>
                        </div>
                        <div>I can build it myself if necessary, but
                          this will hinder others wanting to try the AOT
                          code caching on macos.</div>
                        <div><br>
                        </div>
                        <div>
                          <div dir="ltr" class="gmail_signature">
                            <div dir="ltr"><b>Charles Oliver Nutter</b>
                              <div><i>Architect and Technologist</i></div>
                              <div>Headius Enterprises</div>
                              <a href="https://www.headius.com" target="_blank" rel="noreferrer" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.headius.com</a>
                              <div>
                                <div><a href="mailto:headius@headius.com" target="_blank" rel="noreferrer" moz-do-not-send="true" class="moz-txt-link-freetext">headius@headius.com</a></div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </blockquote>
                    <br>
                  </div>
                </blockquote>
              </div>
            </blockquote>
            <br>
          </div>
        </blockquote>
      </div>
    </blockquote>
    <br>
  </body>
</html>