You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@netbeans.apache.org by GitBox <gi...@apache.org> on 2019/03/11 05:15:29 UTC
[GitHub] [incubator-netbeans] dukescript opened a new pull request #1159:
[NETBEANS-2132] Sign wrapping NBMs bundled in the ZIP distribution
dukescript opened a new pull request #1159: [NETBEANS-2132] Sign wrapping NBMs bundled in the ZIP distribution
URL: https://github.com/apache/incubator-netbeans/pull/1159
Polishing the #917 experience by signing the NBM wrappers that provide JavaFX libraries on JDK11. The NBMs are distributed as part of overall ZIP file, which is trusted - e.g. trusting the NBMs is the right thing to do.
The `nb/updatecenters` module already contained (an empty) `ide.ks` keystore. This change generates temporary signing key, signs the three NBMs files with it and imports the signing certificate into the newly created `ide.ks` store.
The temporary signing keystore is then destroyed, so nobody can use the private key to sign anything else.
CCing @lkishalmi, @matthiasblaesing, @jtulach, @jlahoda
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists