Can SignServer be used with PGP to sign JARs for publishing on Maven Central?

[ralienpp]

My understanding is that a JAR will only be accepted by Maven Central of it was signed with PGP.

1. Is there a way to use SignServer such that its signatures would be accepted by Maven Central?
2. Do you use SignServer to handle the keys used signing your own artifacts for Maven Central? (Having looked around signserver.org, I see that your own artifacts are signed with OpenPGP, that relies on RSA keys).

[ralienpp]

For the benefit of others looking for the same thing, the docs have a section about OpenPGP: https://doc.primekey.com/signserver/signserver-operations/setting-up-openpgp-signer

[netmackan]

1. Yes, the OpenPGP ascii armored detached signatures created by the OpenPGPSigner in SignServer can be used. (As you found out in the second post)
2. We started signing the release artifacts and artifacts for the Central repository before we had that functionality in SignServer and still it is done with a manual process but I really like to start using SignServer for that obviously :)