Webstart blocked by OS X Mountain Lion

[patrick@…]

On Apple OS X 10.8 aka Mountain Lion, JOSM cannot be started via webstart due to a missing or invalid signature. There is no manual override option.

Details (German):

Seit gestern gibt es das neue Betriebssystem für stationärne Macs, Mac OS X 10.8 'Mountain Lion'.
Josm läuft nicht.
Beim Starten wird das Zertifikat abgelehnt. Ein Löschen und erneutes Laden von Josm änderte nichts.
Fehlermeldung: 'Die digitale Signatur ist nicht vertrauenswürdig. Java erlaubt keinen Zugriff auf dieses Programm.'
Manuelles Zulassen wird nicht erlaubt

[Cobra]

This might be related to the new "Gatekeeper" checking signatures before allowing applications to run. There seems to exist a similar problem with java applets: ​http://stackoverflow.com/questions/11665386/os-x-10-8-gatekeeper-and-java-applets

[Cobra]

It seems like the webstart gets blocked by Apple's Gatekeeper because it isn't signed by a certificate issued by Apple to someone with an Apple Developer ID (which costs 99$ per year).

(german) forum thread: ​http://forum.openstreetmap.org/viewtopic.php?id=17601

[bastiK]

​Doc on the Apple web site.

In my humble opinion, the minimum requirement for JOSM to comply:

• certificate free of charge or one-time fee
• no contracts that puts a hobby programmer in a disadvantageous position (liabilities, etc.)
• signing-tools, that run on Linux, so it can be part of the automated build process

[Cobra]

Workaround: turn gatekeeper off. ​http://www.toolfarm.com/blog/entry/installing_osx_10.8_mountain_lion_please_read

[Don-vip]

Are we OK to say we won't do anything on this subject and thereby close this ticket as wontfix ?

[drnoble]

This also appears to apply to the OS X package version.

Temporarily disabling Gatekeeper, opening JOSM.app, then re-enabling Gatekeeper also appears to work for me.

[anonymous]

Ticket #8034 has been marked as a duplicate of this ticket.

[bastiK]

Ticket #8524 has been marked as a duplicate of this ticket.

[Don-vip]

Ticket #9313 has been marked as a duplicate of this ticket.

[John Firebaugh]

I opened an issue on the Apple Bug Reporter regarding this issue. It was closed as a 3rd Party Issue, with the following comment:

You are using an obsolete JavaApplicationStub which is stuck launching Java SE 6 and is deprecated. You need to rebundle the app with Java 7 (or 8), and resign the app using that.

I understand the reluctance to pay for a Developer ID, but could you investigate whether rebundling the app with Java 7 or 8 would at least result in a better error message for the unsigned app?

[Don-vip]

Replying to John Firebaugh:

could you investigate whether rebundling the app with Java 7 or 8 would at least result in a better error message for the unsigned app?

See #8654 :D