Recursively signs certain files, even inside jar files, with "codesign" on macOS
Find a file
2020-03-25 08:58:10 +01:00
src/main/java/com/dgunia/signpackage Removed threadpool because somehow appimageoutput/MyApp.app/Contents/runtime/Contents/MacOS/libjli.dylib was not signed due to a "File not found" error. 2020-03-25 08:38:04 +01:00
build.sh Initial checkin 2020-02-26 11:43:38 +01:00
LICENSE Initial commit 2020-03-25 08:36:22 +01:00
pom.xml Initial checkin 2020-02-26 11:43:38 +01:00
README.md Update README.md 2020-03-25 08:58:10 +01:00

signpackage

To notarize Java apps on macOS it is necessary to sign all jar and dylib file in the .app package with the same signature. dylib files can even exist inside jar files and have to be signed inside the jar file, too. This program here performs the codesign process. You can use it e.g. like this:

java -jar SignPackage.jar -d appimageoutput -t -r -k "Developer ID Application: John Public (XXXXXXXXXX)" -e "src/main/deploy/package/macosx/MyApp.entitlements"

The parameters are:

-d The directory that contains the files that have to be codesigned.
-t Set secure timestamp using the codesign timestamp parameter
-r Harden using the codesign runtime parameter
-k Key name
-e Entitlements file

It is explained further here: https://blog.dgunia.de/2020/02/12/signed-macos-programs-with-java-14/

To build the SignPackage.jar file just run build.sh.