Today there's no clear preferred solution to this problem. One should be able to specify a URL for the keystore, or one may want to hide the keystore behind a remote signing service (for security reasons). This last feature has an existing pluggable implementation available from the webstart plugin.

[top]