Creating a keystore for plugin signing the easy way

Fri, 09 Mar 2012 18:34:37 GMT

Previously when creating keystores for plugin signing I've used a lot of dark magic, crying at the moon and a custom tool I wrote called KeystoreUtil to convert between different formats. The other day I was doing a consulting gig on plugin signing and came up with an easier way just using iKeyman and the Java tooling. I created a presentation with the various commands and screenshots and put it on Slideshare.

Hope it will help someone.

Creating a keystore for plugin signing the easy way

View more PowerPoint from lekkim

BAT-files (yup - you heard right!) to sign an entire update site

Tue, 20 Apr 2010 14:00:11 GMT

Digitally signing an Eclipse update after the fact (i.e. it's not part of the build) can be tedious and time consuming. To make the process easier I wrote two small BAT-files that does the recursive signing of all plugin and feature JAR-files for you. Just stick the two BAT-files (signall.bat and dosign.bat) in the root Eclipse update site directory (together with site.xml) and invoke signall.bat.

Syntax
signall.bat <keystore path> <keystore password> <certificate alias from keystore>

Example
signall.bat mykeystore changeit signer_key

signall.bat

@echo off
set jdkhome=%JAVA_HOME%
for /f %%a IN ('dir /b /s *.jar') do call dosign.bat %1 %2 %3 %%a
set jdkhome=

dosign.bat

@echo off
echo Signing: %4
%jdkhome%\bin\jarsigner.exe -keystore %1 -storepass %2 %4 %3

lekkimworld.comjarsigner

Creating a keystore for plugin signing the easy way

BAT-files (yup - you heard right!) to sign an entire update site