Software Infrastructure : Java Signing at MBARI
This page last changed on Dec 04, 2007 by brian.

About Jar Signing

If you intend to distribute an application using Java Web Start you will need to digitally sign the jar using a certificate that verifies the jars origin. MBARI provides a security certificate from Verisign that you can use for signing your Java applications.

Keystore Details

Parameter value
Keystore Location http://seaspray.shore.mbari.org/keystore/keystore.bin
Keystore Alias MBARIjava
Keystore Password java1700
Key Password javaBeansMakeLousyCoffee

Ant Example

Here's an example of how to sign your jars using Ant

<target name="sign" description="Sign jar files" >
    <property name="lib" value="lib" />
    <property name="keystore.alias" value="MBARIjava" />
    <property name="keystore.passwd" value="java1700" />
    <property name="key.password" value="javaBeansMakeLousyCoffee" />
    <property name="keystore" value="http://seaspray.shore.mbari.org/keystore/keystore.bin" />
    <signjar alias="${keystore.alias}" storepass="${keystore.passwd}" keystore="${keystore}" keypass="${key.password}">
        <fileset dir="${lib}">
            <include name="**/*.jar" />
        </fileset>
    </signjar>
</target>
Document generated by Confluence on Feb 04, 2026 09:02