Sign reproducible builds by default. The detached signature is available
diff --git a/build.xml b/build.xml
index 0cc7099..f0ed571 100644
--- a/build.xml
+++ b/build.xml
@@ -2666,12 +2666,18 @@
# This file was auto-generated by the pre-release Ant target
+# Any unwanted settings may be over-ridden in a build.properties file located
+# in the same directory as this file.
+
# Set the version-dev to "" (empty string) as this is not a development release.
version.dev=
# Ensure consistent timestamps for reproducible builds
ant.tstamp.now.iso=${tstamp.iso.release}
+# Enable insertion of detatched signatures into the Windows installer.
+do.codesigning=true
+
# Reproducible builds require the use of the build tools defined below. The
# vendors (where appropriate) and versions must match exactly for a reproducible
# build since this data is embedded in various files, particularly JAR file
