Hello,
I'm trying to build a p2 repository and sign it. The problem is that
I have an eclipse plugin dependency in nexus, which is not signed
and the signing plugin doesn't sign it.
What I've tried so far:
- Run jarsigner-plugin from the parent pom (Jarsigner is called
from parent pom.xml). It signs the local dependencies, but not
the eclipse plugin dependency from nexus
(myPlugin:unsignedPlugin).The generated artifacts.xml contains
download.md5 only for the remote dependency, but not for the
locally builded bundles.
- In addition to 1. I've tried to sign it after the creation of
the p2 repository, but the download.md5 and download.size in
artifacts.xml doesn't correspond to the actual (signed) jars and
Eclipse
. Bug 344691
indicates similar problem and is resolved, but not for maven
dependencies.
Is it possible to disable the generation of download.size and
download.md5 in artifacts.xml? That would kind of solve my
problem. Or is there a better solution?
This is my parent pom:
<modules>
<module>../myplugin.feature</module>
<module>../myplugin.branding</module>
<module>../myplugin.p2</module>
</modules>
<dependencies>
<dependency>
<groupId>myplugin</groupId>
<artifactId>unsignedPlugin</artifactId>
<version>1.0.0</version>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-jarsigner-plugin</artifactId>
<version>1.3.1</version>
<configuration>
<keystore>../myplugin.parent/clientcert.jks</keystore>
<storepass>storepass</storepass>
<alias>alias</alias>
<keypass>keypass</keypass>
<arguments>
<argument>-sigalg</argument>
<argument>MD5withRSA</argument>
<argument>-digestalg</argument>
<argument>SHA1</argument>
</arguments>
</configuration>
<executions>
<execution>
<id>sign</id>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.eclipse.tycho</groupId>
<artifactId>tycho-maven-plugin</artifactId>
<version>0.19.0</version>
<extensions>true</extensions>
</plugin>
<plugin>
<groupId>org.eclipse.tycho</groupId>
<artifactId>tycho-p2-plugin</artifactId>
<version>0.19.0</version>
</plugin>
<plugin>
<groupId>org.eclipse.tycho</groupId>
<artifactId>target-platform-configuration</artifactId>
<version>0.19.0</version>
<configuration>
<resolver>p2</resolver>
<environments>
<environment>
<os>linux</os>
<ws>gtk</ws>
<arch>x86</arch>
</environment>
<environment>
<os>linux</os>
<ws>gtk</ws>
<arch>x86_64</arch>
</environment>
<environment>
<os>win32</os>
<ws>win32</ws>
<arch>x86_64</arch>
</environment>
<environment>
<os>win32</os>
<ws>win32</ws>
<arch>x86</arch>
</environment>
<environment>
<os>macosx</os>
<ws>cocoa</ws>
<arch>x86_64</arch>
</environment>
</environments>
<allowConflictingDependencies>true</allowConflictingDependencies>
<pomDependencies>consider</pomDependencies>
</configuration>
</plugin>
</plugins>
<pluginManagement>
<plugins>
<plugin>
<groupId>org.eclipse.tycho</groupId>
<artifactId>tycho-packaging-plugin</artifactId>
<version>0.19.0</version>
<configuration>
<format>yyyyMMdd-HHmm</format>
</configuration>
</plugin>
</plugins>
</pluginManagement>
</build>
--
Mit freundlichen Grüßen / Best regards,
Aleksandar Toshovski

Dipl.-Inf Aleksandar Toshovski | Software Entwicklung
abas Software AG | Südendstraße 42 | 76135 Karlsruhe | Germany
Phone: +49(0)721-96723-0 | Fax: +49(0)721-96723-100
Web: http://www.abas-software.com | http://www.abas.de
Board of Directors / Vorstand: Michael Baier, Jürgen Nöding,
Mario Raatz, Werner Strub
Chairman Board of Directors / Vorstandsvorsitzender: Werner
Strub
Chairman Supervisory Board / Aufsichtsratsvorsitzender: Udo
Stößer
Registered Office / Sitz der Gesellschaft: Karlsruhe
Commercial Register / Handelsregister: HRB 107644 Amtsgericht
Mannheim