Apache Maven JarSigner Plugin Version 1.3.2 - Released

The Maven team is pleased to announce the release of the Maven Jarsigner Plugin, version 1.3.2.

This plugin signs and verifies the project artifacts using the jarsigner tool. See the plugin's site for more details.

This plugin is meant to supercede the existing jar:sign and jar:verify goals from the Maven Jar Plugin which will be deprecated in a future release.

To use the updated plugin in your projects, you need to add the following snippet to the plugins or plugin management section of your POM:

1<plugin>
2  <groupId>org.apache.maven.plugins</groupId>
3  <artifactId>maven-jarsigner-plugin</artifactId>
4  <version>1.3.2</version>
5</plugin>

Release Notes - Maven Jar Signer Plugin - Version 1.3.2

Bug:

  • MJARSIGNER-34 - The 'verify' goal of the plugin is passing '-keystore' but not '-storetype'.
  • MJARSIGNER-35 - verbose mode shows keystore password in clear text

Task:

  • MJARSIGNER-36 - Use maven-shared-utils 0.6 and maven-jarsigner 1.3.2

Enjoy,

The Maven team.