You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Angelo D. (JIRA)" <ji...@apache.org> on 2016/08/23 13:01:22 UTC

[jira] [Updated] (MGPG-57) passphraseServerId is ignored if a server with id gpg.passphrase exists

     [ https://issues.apache.org/jira/browse/MGPG-57?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Angelo D. updated MGPG-57:
--------------------------
    Description: 
I have multiple GPG keys in my keyring and I'd like to select a specific one for signing. Each key has a different passphrase, stored encrypted in my local settings.xml file. 
{code:xml}
    <server>
      <id>gpg.passphrase</id>
      <passphrase>...</passphrase>
    </server>
    <server>
      <id>my.signing.key</id>
      <passphrase>...</passphrase>
    </server>
{code}
My gpg configuration in the project's pom.xml file hase
{code:xml}
...
    <configuration>
        <keyname>my.signing.key</keyname>
        <passphraseServerId>my.signing.key</passphraseServerId>
    </configuration>
...
{code}
If I try to sign my artifacts with this configuration I get an error
{noformat}
[INFO] --- maven-gpg-plugin:1.6:sign (default-cli) @ client ---
gpg: skipped "my.key": bad passphrase
gpg: signing failed: bad passphrase
{noformat}
If I remove the {{gpg.passphrase}} server from the settings everything works fine.

  was:
I have multiple GPG keys in my keyring and I'd like to select a specific one for signing. Each key has a different passphrase, stored encrypted in my local settings.xml file. 
{code:xml}
    <server>
      <id>gpg.passphrase</id>
      <passphrase>...</passphrase>
    </server>
    <server>
      <id>my.signing.key</id>
      <passphrase>...</passphrase>
    </server>
{code}
My gpg configuration in the project's pom.xml file hase
{code:xml}
...
    <configuration>
        <keyname>my.key</keyname>
        <passphraseServerId>my.key</passphraseServerId>
    </configuration>
...
{code}
If I try to sign my artifacts with this configuration I get an error
{noformat}
[INFO] --- maven-gpg-plugin:1.6:sign (default-cli) @ client ---
gpg: skipped "my.key": bad passphrase
gpg: signing failed: bad passphrase
{noformat}
If I remove the {{gpg.passphrase}} server from the settings everything works fine.


> passphraseServerId is ignored if a server with id gpg.passphrase exists
> -----------------------------------------------------------------------
>
>                 Key: MGPG-57
>                 URL: https://issues.apache.org/jira/browse/MGPG-57
>             Project: Maven GPG Plugin
>          Issue Type: Bug
>    Affects Versions: 1.6
>         Environment: Linux, maven 3.2.5
>            Reporter: Angelo D.
>            Priority: Minor
>
> I have multiple GPG keys in my keyring and I'd like to select a specific one for signing. Each key has a different passphrase, stored encrypted in my local settings.xml file. 
> {code:xml}
>     <server>
>       <id>gpg.passphrase</id>
>       <passphrase>...</passphrase>
>     </server>
>     <server>
>       <id>my.signing.key</id>
>       <passphrase>...</passphrase>
>     </server>
> {code}
> My gpg configuration in the project's pom.xml file hase
> {code:xml}
> ...
>     <configuration>
>         <keyname>my.signing.key</keyname>
>         <passphraseServerId>my.signing.key</passphraseServerId>
>     </configuration>
> ...
> {code}
> If I try to sign my artifacts with this configuration I get an error
> {noformat}
> [INFO] --- maven-gpg-plugin:1.6:sign (default-cli) @ client ---
> gpg: skipped "my.key": bad passphrase
> gpg: signing failed: bad passphrase
> {noformat}
> If I remove the {{gpg.passphrase}} server from the settings everything works fine.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)