Time for action – signing the plug-ins

Integrating signatures into a Tycho build is a matter of adding a plug-in to the build script. In addition, Java properties need to be passed in to provide access to the arguments required by the jarsigner tool.

1. Add the plug-in to the parent pom.xml file:

   <plugin>
     <groupId>org.apache.maven.plugins</groupId>
     <artifactId>maven-jarsigner-plugin</artifactId>
     <version>1.4</version>
     <executions>
       <execution>
         <id>sign</id>
         <goals>
           <goal>sign</goal>
         </goals>
       </execution>
     </executions>
     <configuration>
       <verbose>true</verbose>
       <!-- alias>packtpub</alias -->
       <keystore>${project.parent.basedir}/keystore</keystore>
       <!-- storepass>...</storepass -->
       <!-- keypass>...</keypass -->
     </configuration>
   </plugin>

2. Run mvn package and...