Eclipse update site - how to sign a jar?

Question

I have several Eclipse plugins that are part of the function. We would like to apply signatures to these plugins when updating the update site.

I see the JAR Signing tab when exporting a separate plugin, but I do not see anything like this in the settings of the update site project.

In addition, the textbooks I read use self-signed certificates. Can someone point me to instructions for using Verisign certificates (i.e. * .pfx files)?

Can anyone help?

Thanks Alan

Edit: I answered Kana's answer as an answer, because it is very similar to the steps I took and was an inspiration. I actually followed these instructions to sign banners because it was based on pfx files: https://support.comodo.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=1072

Step 1: Run the following command to view the certificate information (substituting the file name with your own):

keytool -list -v -storetype pkcs12 -keystore [Filename].pfx 

Step 2: Highlight the top of the output and mark the name Alias ​​Name .

Step 3: Sign each jar file with the following command (substituting file names and an alias name for yours):

 jarsigner -storetype pkcs12 -keystore [Filename].pfx [Filename].jar "[AliasName]" 

Now I need to come up with a way to control / automate the process.

Answer 1

Updating the site design does not provide such an opportunity to sign banners. Signing banks is a pure Java concept, you can use the signtool from the JDK to do this.

If you want to sign up for banners using a certificate for signing a Windows code, you can refer to this blog post .

In my successful experience, I first convert pfx to a JKS format certificate, then call the command below in ant,

 <signjar sigfile="MyCompany" alias="${sign.alias}" keystore="${sign.keystore}" storepass="${sign.storepass}" keypass="${sign.keypass}" tsaurl="https://timestamp.geotrust.com/tsa" preservelastmodified="true">