shade plugin: avoiding "Invalid signature" about gs-maven HOT 2 CLOSED

Does that configuration work for you? I doesn't work for me. The generated jar file still contains signature files and when I try to run jarsigner -verify jarfileName it will print out the error message "java.lang.SecurityException: Invalid signature file digest for Manifest main attributes".

@stash how did you do in your environment?

from gs-maven.

Thanks @stash , but I think these adjustments to the maven-shade-plugin would go too far out of the way of the focus of this guide. This guide is meant to get the reader going on some basic maven stuff. We simply added the maven-shade-plugin as the means to make the code runnable without complex classpath steps on the command line. For anyone working on a production solution, they should certainly evaluate more complex settings when dealing with things like signed jars, etc.

from gs-maven.