automated "secure" code signing

Viewed 1398

I want to set up the jobs in our buildserver (Jenkins) to automatically sign the generated jars.

For obvious reasons I do not want to put the certificate and credentials in the version control, or even readable in the job configuration.

Ideally I want to have some kind of "signing server" where the buildserver can send a jar to, to be signed.

According to the documentation the Eclipse project has a system like that. But there's no mention on the technology they use.

So does anybody know of a "singing server" solution, or a different way to solve this problem?

2 Answers
Related