All geek questions in one place

Tycho & jar subscription

I use maven and tyhco to compile and build my eclipse plugins and create a p2 repository.

However, when I install my plugins, eclipse shows a warning for untrusted content. I know that to solve this problem I have to sign the plugins that I distribute.

However, I don't know if there is a way to sign the plugins that I build with tycho ...

(I'm not an expert on maven and jar subscriptions, so forgive me for the dumb question!)

+6
source share
1 answer

You can see a working example in the Mylyn-Mantis pom.xml Section . I have a special profile for signing:

<profile> <id>sign</id> <activation> <property> <name>jarsigner.alias</name> </property> </activation> <build> <plugins> <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-jarsigner-plugin</artifactId> <version>1.2</version> <executions> <execution> <id>sign</id> <goals> <goal>sign</goal> </goals> </execution> </executions> </plugin> </plugins> </build> </profile>

I usually invoke the sign command as mvn clean package -Djarsigner.alias=... -Djarsigner.storepass=... -Djarsigner.keypass=....

You also need to have a code signing certificate that you will import using keytool -trustcacerts -importcert -file $CERTIFICATE -alias $ALIAS -keystore keystore.jks .

+7
source

Source: https://habr.com/ru/post/900447/

More articles:


All Articles