in src/main/java/org/apache/maven/plugins/jarsigner/JarsignerSignMojo.java [118:128]
protected JarSignerRequest createRequest(File archive) throws MojoExecutionException {
JarSignerSignRequest request = new JarSignerSignRequest();
request.setSigfile(sigfile);
request.setTsaLocation(tsa);
request.setTsaAlias(tsacert);
request.setCertchain(certchain);
// Special handling for passwords through the Maven Security Dispatcher
request.setKeypass(decrypt(keypass));
return request;
}