MAS codesign requirements break Java app signing

[Zach Oakes]

Well here is the full output of "codesign -dv MyApp.app" for the app
generated via appbundler:

Executable=/path/to/MyApp.app/Contents/MacOS/JavaAppLauncher
Identifier=info.oakleaf.myapp
Format=bundle with Mach-O thin (x86_64)
CodeDirectory v=20200 size=286 flags=0x0(none) hashes=5+5 location=embedded
Signature size=4351
Signed Time=Nov 10, 2014, 7:41:39 PM
Info.plist entries=17
TeamIdentifier=445UCQ79D9
Sealed Resources version=2 rules=12 files=7
Internal requirements count=1 size=204

On Mon, Nov 10, 2014 at 7:30 PM, Michael Hall <mik3hall at gmail.com> wrote:

> On Nov 10, 2014, at 4:17 PM, Zach Oakes <zsoakes at gmail.com> wrote:
>
> > With the Ant task, I already can manually edit my Info.plist so that's
> not
> > an issue.
>
> I have browsed through where this thread has gone and may of missed some
> things and aren't yet using javapackager for anything so do not know how to
> translate appbundler related to that structure. Also I'm not aware of
> openjdk changes to appbundler if there have been any of those.
> appbundler set java.library.path to <whatever.app>/Contents/MacOS
> dylib's put there should automatically be found.
>
> Classpath was automatically set to any jars, and only jars, included in
> the Java directory. That also included a Classes directory. You could
> locate resources in there off of classpath.
>
> What I thought was something missed was a way to access resources that you
> did not want in classpath. I had this need in one application and so
> included my own JavaApp directory, not in classpath.
>
> If you are manually setting class path you probably shouldn't be. What
> appbundler had should meet most needs? It shouldn't be needed and could
> have something to do with sandboxing failing.
>
> Not sure I've seen or had any other thoughts myself on why you get the v2
> message. If the -dv looks correct and the codesign verifies. The file count
> on the -dv looked strange given all files are now supposed to be included
> and you have an embedded jre. Didn't you only show like 7 files on the -dv?
>
> Michael Hall
>
> trz nio.2 for OS X http://www195.pair.com/mik3hall/index.html#trz
>
> HalfPipe Java 6/7 shell app
> http://www195.pair.com/mik3hall/index.html#halfpipe
>
> AppConverter convert Apple jvm to openjdk apps
> http://www195.pair.com/mik3hall/index.html#appconverter
>
>
>
>
>