You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Wendy Smoak (JIRA)" <ji...@codehaus.org> on 2007/04/05 05:44:20 UTC

[jira] Created: (MGPG-7) Ability to sign jars when using deploy:deploy-file

Ability to sign jars when using deploy:deploy-file
--------------------------------------------------

                 Key: MGPG-7
                 URL: http://jira.codehaus.org/browse/MGPG-7
             Project: Maven 2.x GPG Plugin
          Issue Type: Improvement
    Affects Versions: 1.0-alpha-3
            Reporter: Wendy Smoak



We need to be able to deploy signatures alongside jars that were not built with Maven.  

For example, Apache Tomcat is built with Ant, but they would like to deploy signed jars to the ASF repo to be synced to central.  Because of the signature requirement, they are currently hosting a separate repository under their website.

Something like "mvn deploy:deploy-file gpg:sign -D..." should work.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Commented: (MGPG-7) Ability to sign jars when using deploy:deploy-file

Posted by "Daniel Kulp (JIRA)" <ji...@codehaus.org>.
    [ http://jira.codehaus.org/browse/MGPG-7?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_94327 ] 

Daniel Kulp commented on MGPG-7:
--------------------------------


I've been thinking about this a bit more...  

Would this be acceptable:    I can probably add a "gpg:sign-and-deploy-file" mojo that would just subclass the deploy-file mojo and sign everything it deploys.    It would take all the same flags as deploy-file (and the added gpg ones) so should be a "drop in" replacement for deploy:deploy-file.





> Ability to sign jars when using deploy:deploy-file
> --------------------------------------------------
>
>                 Key: MGPG-7
>                 URL: http://jira.codehaus.org/browse/MGPG-7
>             Project: Maven 2.x GPG Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.0-alpha-3
>            Reporter: Wendy Smoak
>
> We need to be able to deploy signatures alongside jars that were not built with Maven.  
> For example, Apache Tomcat is built with Ant, but they would like to deploy signed jars to the ASF repo to be synced to central.  Because of the signature requirement, they are currently hosting a separate repository under their website.
> Something like "mvn deploy:deploy-file gpg:sign -D..." should work.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Closed: (MGPG-7) Ability to sign jars when using deploy:deploy-file

Posted by "Daniel Kulp (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MGPG-7?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Kulp closed MGPG-7.
--------------------------

       Resolution: Fixed
    Fix Version/s: 1.0-alpha-4

> Ability to sign jars when using deploy:deploy-file
> --------------------------------------------------
>
>                 Key: MGPG-7
>                 URL: http://jira.codehaus.org/browse/MGPG-7
>             Project: Maven 2.x GPG Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.0-alpha-3
>            Reporter: Wendy Smoak
>             Fix For: 1.0-alpha-4
>
>
> We need to be able to deploy signatures alongside jars that were not built with Maven.  
> For example, Apache Tomcat is built with Ant, but they would like to deploy signed jars to the ASF repo to be synced to central.  Because of the signature requirement, they are currently hosting a separate repository under their website.
> Something like "mvn deploy:deploy-file gpg:sign -D..." should work.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira