in src/main/java/org/apache/maven/plugins/jarsigner/JarsignerSignMojo.java [306:315]
protected JarSignerRequest createRequest(File archive) throws MojoExecutionException {
JarSignerSignRequest request = new JarSignerSignRequest();
request.setSigfile(sigfile);
updateJarSignerRequestWithTsa(request, tsaSelector.getServer());
request.setCertchain(certchain);
// Special handling for passwords through the Maven Security Dispatcher
request.setKeypass(decrypt(keypass));
return request;
}