Maven is used for building the sources.

Insecure HTTP

Prior to Maven version 3.2.3, plug-ins and artifacts were fetched from the Maven Central Repository over insecure HTTP.

Make sure to edit your ~/.m2/settings.xml to override the URL of the Maven Central Repository.

For Community users, refer to doc/sample-maven-settings-community.xml as an example.

For Keyfactor developers please use doc/sample-maven-settings-primekey.xml which will use an internal repository.

Building SignServer

To build SignServer from the command line using Maven, execute:

mvn install

This will build all of the SignServer modules, putting the artifacts under ./lib and the SignServer/DeployTools module descriptors in ./mods-available.

Gathering Dependencies for later Offline Build

It's possible to let Maven gather all of the dependencies to allow performing an offline build at a later stage.

To gather all of the dependencies, execute:

mvn -Dmaven.repo.local=/tmp/signserver-repo/ dependency:go-offline install -DskipTests=true

To then perform a build completely offline, execute:

mvn -Dmaven.repo.local=/tmp/signserver-repo/ -o install