Signing bundled JRE

[Marco Dinacci]

Hi Steve,

> Thanks for all the response.    As it turns out I think I may be able to get
> by without codesigning the embedded JRE.  The error that comes up seems to
> have been more of a guideline.

Apple documentation says:

You should sign every executable in your product, including
applications, tools, hidden helper tools, utilities and so forth.
Signing an application bundle covers its resources, but not its
subcomponents such as tools and sub-bundles. Each of these must be
signed independently.

So I think you have to sign all the libraries too. After my first
submission I got an e-mail back from Apple with a bunch of Invalid
Signature errors referring to every single dylib in the bundle...

I've a couple more suggestions regarding your error message. Check
that you include libfreetype.6.dylib which is *not* included in a
prepackaged jvm and that you patch libfontmanager.dylib with
install_name_tool (sudo install_name_tool -change
/usr/X11/libfreetype.6.dylib @rpath/libfreetype.dylib
libfontmanager.dylib).

Second, if you zip the resulting .app, be sure to use the option
--symlinks or -y otherwise the zip utility will copy and compress
libjli.dylib in Contents/MacOS instead of respecting the symlink.


Best,
Marco