[oXygen-sdk] Signing plugins for use with an add-on site

[oXygen XML Editor Support]

Hi Nigel,

I'll revise the documentation to make it clear that if you want to sign 
the add-on you should pack it as a jar archive and if you don't intend 
to sign it you can just pack it as a zip instead.

So just pack the add-on as a jar archive. Seeing that you already have a 
certificate signed by a trusted authority, you can just use the 
jarsigner command line tool inside the JDK 
({JDK_install_dir}/bin/jarsigner.exe) or the ANT signjar task (which is 
just a front for the jarsigner tool).

Best Regards,
Alex
--
Alex Jitianu
<oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger
http://www.oxygenxml.com

On 04-Mar-13 5:33 PM, George Cristian Bina wrote:
> Hi Nigel,
>
> You should pack the plugin itself as a jar instead of zip and sign that.
>
> Best Regards,
> George
> --
> George Cristian Bina
> <oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger
> http://www.oxygenxml.com
>
> On 3/4/13 5:30 PM, Nigel Whitaker wrote:
>> Hello,
>>
>> We've been experimenting with an add-on site and have got things working
>> apart from the code signing.
>>
>> We've watched the video
>> (http://www.oxygenxml.com/demo/AddonsSupport.html) and think it suggests
>> that it's the .zip file rather than the .jar which is signed?  (There's
>> a screen at 4:00 mins with: "2:  Digitally sign the archive")
>>
>> I've tried using google to research signing zip files but it's leading
>> me to signing systems for Android applications (usually running on Android).
>>
>> Do you have any hints/suggestions for signing?  (We've got codesigning
>> key/certificates in .cert, .p12, .pem formats and in a Java keystore).
>>
>> Thanks,
>>
>> Nigel
>>
> _______________________________________________
> oXygen-sdk mailing list
> oXygen-sdk at oxygenxml.com
> http://www.oxygenxml.com/mailman/listinfo/oxygen-sdk
>