From dd4c5f37498e215060d135fe1957035cbdb836c2 Mon Sep 17 00:00:00 2001
From: yumaoka <y.umaoka@gmail.com>
Date: Mon, 30 Oct 2023 17:24:13 -0400
Subject: [PATCH] ICU-22561 Added maven-gpg-plugin in pom.xml to sign artifacts
 for maven central release.

---
 icu4j/pom.xml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/icu4j/pom.xml b/icu4j/pom.xml
index 6cc38fca149f..90de730ce214 100644
--- a/icu4j/pom.xml
+++ b/icu4j/pom.xml
@@ -481,6 +481,34 @@
       </build>
     </profile>
 
+    <profile>
+      <id>with_signature</id>
+      <build>
+        <plugins>
+          <plugin>
+            <artifactId>maven-gpg-plugin</artifactId>
+            <executions>
+              <execution>
+                <id>sign-artifacts</id>
+                <phase>verify</phase>
+                <goals>
+                  <goal>sign</goal>
+                </goals>
+                <configuration>
+                  <keyname>${gpg-keyname}</keyname>
+                  <passphraseServerId>${gpg-keyname}</passphraseServerId>
+                  <gpgArguments>
+                    <arg>--pinentry-mode</arg>
+                    <arg>loopback</arg>
+                  </gpgArguments>
+                </configuration>
+              </execution>
+            </executions>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+
     <!-- This is used to create "merged" javadoc for all modules combined.
       Matches what is posted on a website (where icu4j / charset / localespi are all in one).
       That's why you need to run this with `site`, but build the artifacts first (for the taglets):