...
Download the desired “prerelease” plugin from either Nexus itself, or our prerelease folder. (Of course you could also build from source yourself.)
Download the corresponding signature file along with it if available, or you would need to generate a local GPG key and sign them yourself. Anything we post to the download site will be signed already.
If you download it the artifact directly from Nexus directly, the artefact it will be signed by Jenkins. You can obtain To use the Jenkins key by
wgetas the truststore, download it from https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS.
Place the public signing key into a local file (or download it if one is provided).
Install the plugin directly from the local file using a command like the following (the Windows equivalent is roughly the same obviously):
...