[lts-iwg] LTS jar signing is here!

["Steve Francisco" <cisco@xxxxxxxxxx>]

Hello LTS users,
LTS now has its own certificate for jar signing!  This means that bundles built in the central LTS forge can be identified by their signatures as being officially from LTS.  Users of the private LTS forges can also make use of the signing ability if desired. 
 
For LTS Central builds, no change is needed.  Builds are already signing modified bundles with the LTS signature.  
For private LTS builds, maintenance providers can choose to use the LTS signature as part of the build process, or use their own company signatures as desired.

 

Using jarsigner to verify a bundle will show the following kind of data indicating LTS:

 
More details can be found on our Wiki:  https://wiki.eclipse.org/LTS/HowTos#Signing

 

Steve Francisco

E-mail: cisco@xxxxxxxxxx