# Jarsigner like Plugin

**URL:** <https://bnd.discourse.group/t/jarsigner-like-plugin/431>\
**Category:** GENERAL\
**Created:** [March 22, 2024, 1:42pm UTC](https://bnd.discourse.group/t/jarsigner-like-plugin/431 "2024-03-22T13:42:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![juergen-albert](https://yyz2.discourse-cdn.com/free1/user_avatar/bnd.discourse.group/juergen-albert/32/20_2.png) [@juergen-albert](https://bnd.discourse.group/u/juergen-albert)\
**Post date:** [March 22, 2024, 1:42pm UTC](https://bnd.discourse.group/t/jarsigner-like-plugin/431/1 "2024-03-22T13:42:28Z")

</div>

Hi Folks (especially Peter),

I have written a Plugin that takes the final jar and that does something similar to the JarsignerTool Plugin (running an external Program on the jar and merges the delta in Files and Manifest entries back). It works fine, but right now I register it as a SignerPlugin and use `-sign` as a trigger.  
Do we have any other mechanism for that I can use? It first of all feels wrong and secondly collides potentially with any real jar signer configuration.

Suggestions?

---

<div class="post-metadata">

**Author:** ![pkriens](https://yyz2.discourse-cdn.com/free1/user_avatar/bnd.discourse.group/pkriens/32/3_2.png) [@pkriens](https://bnd.discourse.group/u/pkriens)\
**Post date:** [March 22, 2024, 3:41pm UTC](https://bnd.discourse.group/t/jarsigner-like-plugin/431/2 "2024-03-22T15:41:15Z")

</div>

I’d make it an exporter? This is called after the jars of the project are done and can do whatever it wants.  
Overriding signer sounds like a bad idea.

---

<div class="post-metadata">

**Author:** ![juergen-albert](https://yyz2.discourse-cdn.com/free1/user_avatar/bnd.discourse.group/juergen-albert/32/20_2.png) [@juergen-albert](https://bnd.discourse.group/u/juergen-albert)\
**Post date:** [April 4, 2024, 11:00am UTC](https://bnd.discourse.group/t/jarsigner-like-plugin/431/3 "2024-04-04T11:00:09Z")

</div>

It is not really an exporter, because it adds some additional information to the jar (like the Jarsigner). I need the result to be signed in the end as well.

Or can I can the jarsigner on an exported jar as well?

---

<div class="post-metadata">

**Author:** ![pkriens](https://yyz2.discourse-cdn.com/free1/user_avatar/bnd.discourse.group/pkriens/32/3_2.png) [@pkriens](https://bnd.discourse.group/u/pkriens)\
**Post date:** [April 4, 2024, 2:34pm UTC](https://bnd.discourse.group/t/jarsigner-like-plugin/431/4 "2024-04-04T14:34:03Z")

</div>

An exporter gets the result of a build project and can then do whatever it wants. Signing sounds applicable for this phase.