Every time people install one of our plugins, they get a warning message about
installing "unsigned" Jars.

We do "sign" the Jars, but not with Eclipse Jar-signing techniques, which (if I
recall correctly) require a "Certificate" issued by an officially sanctioned
certificating agency (for a fee).

We sign our Jars using the same PGP method we use for other Jars, which
generates an .asc file.

Is there any way to tie these two methods together, so our Eclipse Jars appear
"signed" by Eclipse?

-Marshall

Reply via email to