Eclipse Community Forums: Plugin Development Environment (PDE) » Headless Build, Signed JARs and Timestamps

Help

Home

Home » Eclipse Projects » Plugin Development Environment (PDE) » Headless Build, Signed JARs and Timestamps

Show: Today's Messages :: Show Polls :: Message Navigator

Headless Build, Signed JARs and Timestamps [message #628727]

Thu, 23 September 2010 19:14

James Peltzer

Messages: 43
Registered: July 2009

Member

Hi all,
I have a code signing certificate with timestamp support which I require to
sign JARs for my application. I do this because my end-user will not likely
have internet access and is also unlikely to update their software very
frequently. As a result, timetamped signed code is very useful as it will
prevent warnings even after my certificate expires provided that the code
was signed before the expiry.

I notice that the properties file used for the headless build has properties
for the alias, keystore, storepass, and keypass but doesn't seem to provide
a mechanism to specify the timestamp authority URL (the -tsa option in the
jarsigner). Is there any mechanism to use timestamped signatures?

James

Report message to a moderator

Re: Headless Build, Signed JARs and Timestamps [message #631701 is a reply to message #628727]

Fri, 08 October 2010 14:02

James Peltzer

Messages: 43
Registered: July 2009

Member

I'll go ahead and reply to myself here. It looks like the best way to do
this is to use the ant "signjar" task.
You would call it from the postAssemble target of your customTargets.xml
file.

I also toyed with the customAssembly.xml figuring the "postJar" task would
be a good spot to do it but found that this task is never getting called.

"James Peltzer" <jpeltzer@hotmail.com> wrote in message
news:i7g8tg$j9n$1@news.eclipse.org...
> Hi all,
> I have a code signing certificate with timestamp support which I require
> to sign JARs for my application. I do this because my end-user will not
> likely have internet access and is also unlikely to update their software
> very frequently. As a result, timetamped signed code is very useful as it
> will prevent warnings even after my certificate expires provided that the
> code was signed before the expiry.
>
> I notice that the properties file used for the headless build has
> properties for the alias, keystore, storepass, and keypass but doesn't
> seem to provide a mechanism to specify the timestamp authority URL
> (the -tsa option in the jarsigner). Is there any mechanism to use
> timestamped signatures?
>
> James
>
>

Report message to a moderator

Previous Topic:	Debug Configuration
Next Topic:	Open View via Context Menu Action

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Apr 24 14:29:51 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter