Signing bundled JRE

[Steve Hannah]

On Wed, Aug 22, 2012 at 6:28 AM, Marco Dinacci <marco.dinacci at gmail.com>wrote:

>
> So I think you have to sign all the libraries too. After my first
> submission I got an e-mail back from Apple with a bunch of Invalid
> Signature errors referring to every single dylib in the bundle...
>

Agreed.  I do sign all of the dylib and jar files, I just found that I have
to sign those *before* I sign the app bundle.  If I sign them after signing
the app bundle, then the act of signing the subcomponents invalidates the
signature of the bundle.


>
> I've a couple more suggestions regarding your error message. Check
> that you include libfreetype.6.dylib which is *not* included in a
> prepackaged jvm and that you patch libfontmanager.dylib with
> install_name_tool (sudo install_name_tool -change
> /usr/X11/libfreetype.6.dylib @rpath/libfreetype.dylib
> libfontmanager.dylib).
>

Done.  I used the instructions on your blog to get past this obstacle.

>
> Second, if you zip the resulting .app, be sure to use the option
> --symlinks or -y otherwise the zip utility will copy and compress
> libjli.dylib in Contents/MacOS instead of respecting the symlink.
>
>
Good point.  I wasn't zipping it, but this is good to keep in mind for the
inevitable future when I'll zip a signed app only to find out that it is
broken :)


-Steve

>
> Best,
> Marco
>



-- 
Steve Hannah
Web Lite Solutions Corp.