Code Signing of App with bundled JDK7 on Mavericks 10.9.1 I have a Java 7 application which I turn into a MacOS App following the instructions on http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/packagingAppsForMac.html.

This is no longer working. The signing still works (I use a "Mac Developer" certificate) and codesign verification claims everything is fine. spctl on my machine or trying to run the application on someone else's machine however results in rejection. (spctl only says "rejected" no further information even on verbose 4)

I tried adding --deep and --force to the code signing, but this did not solve the problem.

I also tried additionally signing the JDK plugin inside the App, but it did not help.

How does the process on the Oracle page above have to be adapted to work on 10.9?
My certificate was of the wrong type. Turns out it has to be of type: "Developer ID Application: "