1

I am new to JAVA development and was working to publish the JAR in maven central for open access. It was mentioned in offical maven page that artifacts must be signed using GPG signature , i would like to know is there any other alternative software to sign the JAR so that it can be published in Maven central other than GPG signature? Will appreciate your help.

Karthikk
  • 326
  • 2
  • 7

1 Answers1

1

All artifacts deployed to Maven Central must be signed by PGP/GPP.

You can use plugin https://www.simplify4u.org/sign-maven-plugin/ which don't use gpg for signing so you don't have to install gpg on all systems which use your project.

Using and configuration of sign-maven-plugin is very easy.

Slawomir Jaranowski
  • 7,381
  • 3
  • 25
  • 33