Digitally signing an Eclipse update after the fact (i.e. it’s not part of the build) can be tedious and time consuming. To make the process easier I wrote two small BAT-files that does the recursive signing of all plugin and feature JAR-files for you. Just stick the two BAT-files (signall.bat and dosign.bat) in the root Eclipse update site directory (together with site.xml) and invoke signall.bat.
Syntax
signall.bat <keystore path> <keystore password> <certificate alias from keystore>
Example
signall.bat mykeystore changeit signer_key
signall.bat
@echo off set jdkhome=%JAVA_HOME% for /f %%a IN ('dir /b /s *.jar') do call dosign.bat %1 %2 %3 %%a set jdkhome=
dosign.bat
@echo off echo Signing: %4 %jdkhome%binjarsigner.exe -keystore %1 -storepass %2 %4 %3