Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I use 2 keystores:</p> <ul> <li>a development keystore which is stored in the SCM. The CI server can thus sign the snapshots.</li> <li>a production keystore with a real production certificate issued by a trusted certification authority.</li> </ul> <p>The development keystore password is in the <code>pom.xml</code>. Here is a snippet of my <code>pom.xml</code>:</p> <pre><code> &lt;plugin&gt; &lt;artifactId&gt;maven-jarsigner-plugin&lt;/artifactId&gt; &lt;version&gt;1.2&lt;/version&gt; &lt;configuration&gt; &lt;storetype&gt;${keystore.type}&lt;/storetype&gt; &lt;keystore&gt;${keystore.path}&lt;/keystore&gt; &lt;alias&gt;${keystore.alias}&lt;/alias&gt; &lt;storepass&gt;${keystore.store.password}&lt;/storepass&gt; &lt;keypass&gt;${keystore.key.password}&lt;/keypass&gt; &lt;/configuration&gt; &lt;/plugin&gt; &lt;!-- ... rest of the pom.xml ... --&gt; &lt;properties&gt; &lt;keystore.path&gt;cert/temp.keystore&lt;/keystore.path&gt; &lt;keystore.type&gt;JKS&lt;/keystore.type&gt; &lt;keystore.alias&gt;dev&lt;/keystore.alias&gt; &lt;keystore.password&gt;dev_password&lt;/keystore.password&gt; &lt;keystore.store.password&gt;${keystore.password}&lt;/keystore.store.password&gt; &lt;keystore.key.password&gt;${keystore.password}&lt;/keystore.key.password&gt; &lt;/properties&gt; </code></pre> <p>In <code>~/.m2/settings.xml</code> I defined a <code>codesgining</code> profile:</p> <pre><code>&lt;settings&gt; &lt;profiles&gt; &lt;profile&gt; &lt;id&gt;codesigning&lt;/id&gt; &lt;properties&gt; &lt;keystore.path&gt;/opt/prod/prod.keystore&lt;/keystore.path&gt; &lt;keystore.alias&gt;prod&lt;/keystore.alias&gt; &lt;keystore.type&gt;JKS&lt;/keystore.type&gt; &lt;keystore.store.password&gt;${keystore.password}&lt;/keystore.store.password&gt; &lt;keystore.key.password&gt;${keystore.password}&lt;/keystore.key.password&gt; &lt;/properties&gt; &lt;/profile&gt; &lt;/profiles&gt; &lt;/settings&gt; </code></pre> <p>when I want to sign the real certificate I invoke maven with the <code>-Pcodesigning -Dkeystore.password=strongPassword</code> parameters. I also configured the <a href="http://maven.apache.org/maven-release/maven-release-plugin/" rel="nofollow noreferrer">maven-release-plugin</a> to use the <code>codesigning</code> profile.</p> <p>Actually it is possible to store the password in <code>settings.xml</code> as long as the file is readable by nobody but you.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload