www-release-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Fox <bri...@infinity.nu>
Subject Re: signing Jars for Eclipse
Date Mon, 05 Dec 2011 17:45:43 GMT
The pgp signing you're doing produces a detached signature. Eclipse is
looking for some embedded signature produced by jarsigner, they are
related but not the same.

On Mon, Dec 5, 2011 at 10:30 AM, Marshall Schor <msa@schor.com> wrote:
> Every time people install one of our plugins, they get a warning message about
> installing "unsigned" Jars.
> We do "sign" the Jars, but not with Eclipse Jar-signing techniques, which (if I
> recall correctly) require a "Certificate" issued by an officially sanctioned
> certificating agency (for a fee).
> We sign our Jars using the same PGP method we use for other Jars, which
> generates an .asc file.
> Is there any way to tie these two methods together, so our Eclipse Jars appear
> "signed" by Eclipse?
> -Marshall

View raw message