Sign 3rd party artifacts with Trace Compass's PGP key

Both Trace Compass update site and RCP update site will be signed.

Requires Tycho 4.0.10 or later.

Use tycho-gpg-plugin:
https://tycho.eclipseprojects.io/doc/4.0.11/tycho-gpg-plugin/sign-p2-artifacts-mojo.html

Signed-off-by: Bernd Hufmann <[email protected]>

Author: bhufmann

pom.xml

@@ -480,6 +480,23 @@
 
     <pluginManagement>
       <plugins>
+        <plugin>
+          <groupId>org.eclipse.tycho</groupId>
+          <artifactId>tycho-gpg-plugin</artifactId>
+          <version>${tycho-version}</version>
+          <executions>
+            <execution>
+              <id>pgpsigner</id>
+              <goals>
+                <goal>sign-p2-artifacts</goal>
+              </goals>
+              <configuration>
+                <keyname>FDA6044E56578104</keyname>
+                <skipIfJarsigned>false</skipIfJarsigned>
+              </configuration>
+            </execution>
+          </executions>
+        </plugin>
         <plugin>
           <groupId>org.eclipse.tycho</groupId>
           <artifactId>tycho-compiler-plugin</artifactId>

rcp/org.eclipse.tracecompass.rcp.product/pom.xml

@@ -124,6 +124,10 @@
                     <source>repository</source>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.eclipse.tycho</groupId>
+                <artifactId>tycho-gpg-plugin</artifactId>
+            </plugin>
         </plugins>
       </build>
     </profile>

releng/org.eclipse.tracecompass.releng-site/pom.xml

@@ -68,6 +68,17 @@
       </plugins>
     </build>
   </profile>
+  <profile>
+    <id>sign-update-site</id>
+    <build>
+      <plugins>
+        <plugin>
+          <groupId>org.eclipse.tycho</groupId>
+          <artifactId>tycho-gpg-plugin</artifactId>
+        </plugin>
+      </plugins>
+    </build>
+  </profile>
 </profiles>
 
 </project>