[MJAR-112] Sign using a PKCS11 token

• Type: New Feature
• Status: Closed
• Priority: Critical
• Resolution: Won't Fix
• Affects Version/s: 2.2
• Component/s: sign
• Assignee: Benjamin Bentmann
• Reporter: Frank Cornelis
• Created: 24/Nov/08 07:02
• Updated: 09/Aug/09 06:23
• Resolved: 09/Aug/09 06:23

Description

For the moment one can only sign using a software keystore. But for production builds your private key is often stored on some smart card device like an eToken. It would be useful if you could configure the maven-jar-plugin to run something similar to:
jarsigner -keystore NONE -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 -providerArg etoken.config the_jar_to_sign.jar ALIAS_XYZ

Where my etoken.config file contains:
name=eToken
library=/usr/lib/libeTPkcs11.so