From 3413a3262d887b97d94e17652d99a806d7fbb372 Mon Sep 17 00:00:00 2001
From: Martin Lippert <mlippert@pivotal.io>
Date: Wed, 2 Oct 2019 08:33:52 +0200
Subject: [PATCH] switch to recommended tsa timestamp server and added signing
 to headless services

---
 eclipse-distribution/pom.xml               |  3 ++-
 eclipse-language-servers/pom.xml           |  3 ++-
 headless-services/commons/pom.xml          | 24 ++++++++++++++++++++++
 headless-services/jdt-ls-extension/pom.xml |  3 ++-
 4 files changed, 30 insertions(+), 3 deletions(-)

diff --git a/eclipse-distribution/pom.xml b/eclipse-distribution/pom.xml
index 36d38b0bd..059b11520 100644
--- a/eclipse-distribution/pom.xml
+++ b/eclipse-distribution/pom.xml
@@ -653,7 +653,8 @@
 					<keystore>${signing.keystore}</keystore>
 					<storepass>${signing.store.password}</storepass>
 					<keypass>${signing.key.password}</keypass>
-					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
+<!--					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa> -->
+					<tsa>http://timestamp.digicert.com</tsa>
 				</configuration>
 			</plugin>
 		</plugins>
diff --git a/eclipse-language-servers/pom.xml b/eclipse-language-servers/pom.xml
index 5ad3b99f9..b18350a2f 100644
--- a/eclipse-language-servers/pom.xml
+++ b/eclipse-language-servers/pom.xml
@@ -405,7 +405,8 @@
 					<keystore>${signing.keystore}</keystore>
 					<storepass>${signing.store.password}</storepass>
 					<keypass>${signing.key.password}</keypass>
-					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
+<!--					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa> -->
+					<tsa>http://timestamp.digicert.com</tsa>
 				</configuration>
 			</plugin>
 			<plugin>
diff --git a/headless-services/commons/pom.xml b/headless-services/commons/pom.xml
index f30668ad7..b809fabdf 100644
--- a/headless-services/commons/pom.xml
+++ b/headless-services/commons/pom.xml
@@ -131,6 +131,30 @@
 					<target>1.8</target>
 				</configuration>
 			</plugin>
+
+			<plugin>
+				<groupId>org.apache.maven.plugins</groupId>
+				<artifactId>maven-jarsigner-plugin</artifactId>
+				<version>3.0.0</version>
+				<executions>
+					<execution>
+						<id>sign</id>
+						<goals>
+							<goal>sign</goal>
+						</goals>
+					</execution>
+				</executions>
+				<configuration>
+					<skip>${signing.skip}</skip>
+					<alias>${signing.alias}</alias>
+					<keystore>${signing.keystore}</keystore>
+					<storepass>${signing.store.password}</storepass>
+					<keypass>${signing.key.password}</keypass>
+<!--					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa> -->
+					<tsa>http://timestamp.digicert.com</tsa>
+				</configuration>
+			</plugin>
+
 		</plugins>
 	</build>
 
diff --git a/headless-services/jdt-ls-extension/pom.xml b/headless-services/jdt-ls-extension/pom.xml
index a3de4f70a..cccd02919 100644
--- a/headless-services/jdt-ls-extension/pom.xml
+++ b/headless-services/jdt-ls-extension/pom.xml
@@ -137,7 +137,8 @@
 					<keystore>${signing.keystore}</keystore>
 					<storepass>${signing.store.password}</storepass>
 					<keypass>${signing.key.password}</keypass>
-					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa>
+<!--					<tsa>http://sha256timestamp.ws.symantec.com/sha256/timestamp</tsa> -->
+					<tsa>http://timestamp.digicert.com</tsa>
 				</configuration>
 			</plugin>