Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Notarize macOS artifacts for macOS Catalina readiness #46498

Open
jasontedor opened this issue Sep 9, 2019 · 6 comments

Comments

@jasontedor
Copy link
Member

commented Sep 9, 2019

macOS Catalina is the next major release of macOS, expected in September/October 2019. Catalina will require applications distributed outside of the Mac App Store to be signed and notarized. For Elasticsearch specifically, this requires that:

  • the bundled JDK be signed/notarized
  • we handle that JNA extracts a native library at runtime
  • the ML binaries be signed/notarized

The bundled JDKs produced by Oracle are signed but not notarized, we are exploring our options here including using a bundled JDK from a different source. JNA is not signed and notarized, our best option here is probably that the bundled JDK have the unsigned library entitlement. For the ML artifacts, we are currently working on integrating signing and notarization into our release pipeline.

@elasticmachine

This comment has been minimized.

Copy link
Collaborator

commented Sep 9, 2019

@oeed

This comment has been minimized.

Copy link

commented Oct 9, 2019

Glad this is being worked on! Is there a rough ETA?

@jasontedor

This comment has been minimized.

Copy link
Member Author

commented Oct 9, 2019

@oeed As a matter of policy, we don't give ETAs, even approximate, sorry.

I will say this though: we are aware that macOS Catalina was released earlier in the week, a lot of us are excited to try it out too and we want to meet our users there, so we understand the importance of wrapping up our work on this.

@oeed

This comment has been minimized.

Copy link

commented Oct 10, 2019

Quite understandable! Was rather silly of me to jump the gun and update.

@JRBeckstrom

This comment has been minimized.

Copy link

commented Oct 16, 2019

Any news on this? Wasn't aware that this was an issue for Elasticsearch and has upgraded to Catalina...

@jasontedor

This comment has been minimized.

Copy link
Member Author

commented Oct 17, 2019

We are blocked by the fact that there is not an upstream distribution of the JDK that is correctly signed and notarized. We are working through these issues via other channels.

@tomcallahan tomcallahan added v6.8.5 and removed v6.8.4 labels Oct 22, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
5 participants
You can’t perform that action at this time.