You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Josh Devins (JIRA)" <ji...@codehaus.org> on 2009/03/24 23:31:12 UTC
[jira] Created: (MAVENUPLOAD-2405) Sync jitr.org release repository
Sync jitr.org release repository
--------------------------------
Key: MAVENUPLOAD-2405
URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
Project: Maven Upload Requests
Issue Type: Wish
Reporter: Josh Devins
"org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAVENUPLOAD-2405) Sync jitr.org release
repository
Posted by "Josh Devins (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=173413#action_173413 ]
Josh Devins commented on MAVENUPLOAD-2405:
------------------------------------------
Done. Every file in /home/groups/j/ji/jitr/htdocs/repositories/release has been signed.
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAVENUPLOAD-2405) Sync jitr.org release
repository
Posted by "Brian Fox (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172174#action_172174 ]
Brian Fox commented on MAVENUPLOAD-2405:
----------------------------------------
Please paste a link where i can view the repository contents, and make sure the artifacts are signed properly:
See here for details on how it should be done:
http://maven.apache.org/developers/release/releasing.html
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Issue Comment Edited: (MAVENUPLOAD-2405) Sync jitr.org
release repository
Posted by "Josh Devins (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172351#action_172351 ]
Josh Devins edited comment on MAVENUPLOAD-2405 at 4/7/09 4:00 PM:
------------------------------------------------------------------
http://www.jitr.org/repositories/release
I have followed the instructions from: http://maven.apache.org/guides/mini/guide-central-repository-upload.html These make no mention of needing to sign the artifacts. The link you provided is for Maven developers, isn't it? I have other projects being rsync'd and this is not needed either. I suppose this is a new effort for security...
Since I have already released the artifacts, is there a way to sign the existing ones already in the repo?
Many thanks.
was (Author: jdevins):
http://www.jitr.org/repositories/release
I have followed the instructions from: http://maven.apache.org/guides/mini/guide-central-repository-upload.html These make no mention of needing to sign the artifacts. It seems to me that the link you provided is for Maven developers, isn't it? I have other projects being rsync'd and this is not needed either. I suppose this is a new effort for security...
Since I have already released the artifacts, is there a way to sign the existing ones already in the repo?
Many thanks.
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Issue Comment Edited: (MAVENUPLOAD-2405) Sync jitr.org
release repository
Posted by "Josh Devins (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172351#action_172351 ]
Josh Devins edited comment on MAVENUPLOAD-2405 at 4/7/09 4:00 PM:
------------------------------------------------------------------
http://www.jitr.org/repositories/release
I have followed the instructions from: http://maven.apache.org/guides/mini/guide-central-repository-upload.html These make no mention of needing to sign the artifacts. It seems to me that the link you provided is for Maven developers, isn't it? I have other projects being rsync'd and this is not needed either. I suppose this is a new effort for security...
Since I have already released the artifacts, is there a way to sign the existing ones already in the repo?
Many thanks.
was (Author: jdevins):
http://www.jitr.org/repositories/release
I have followed the instructions from: http://maven.apache.org/guides/mini/guide-central-repository-upload.html These make no mention of needing to sign the artifacts. It seems to me that the link you provided is for Maven developers, isn't it? I have other projects being rsync'd and this is not needed either.
Thanks...
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAVENUPLOAD-2405) Sync jitr.org release
repository
Posted by "Josh Devins (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172351#action_172351 ]
Josh Devins commented on MAVENUPLOAD-2405:
------------------------------------------
http://www.jitr.org/repositories/release
I have followed the instructions from: http://maven.apache.org/guides/mini/guide-central-repository-upload.html These make no mention of needing to sign the artifacts. It seems to me that the link you provided is for Maven developers, isn't it? I have other projects being rsync'd and this is not needed either.
Thanks...
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MAVENUPLOAD-2405) Sync jitr.org release repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez closed MAVENUPLOAD-2405.
---------------------------------------
Assignee: Carlos Sanchez (was: Brian Fox)
Resolution: Fixed
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Carlos Sanchez
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAVENUPLOAD-2405) Sync jitr.org release
repository
Posted by "Brian Fox (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172357#action_172357 ]
Brian Fox commented on MAVENUPLOAD-2405:
----------------------------------------
We are trying to get more strict about artifacts in central, and making sure everything is signed provides more security for users that artifacts haven't been tampered with. You should be able to script a way to sign all the files, something like:
find . | xargs -L1 -iFILE gpg --clearsign FILE
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MAVENUPLOAD-2405) Sync jitr.org release
repository
Posted by "Josh Devins (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MAVENUPLOAD-2405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=172353#action_172353 ]
Josh Devins commented on MAVENUPLOAD-2405:
------------------------------------------
"org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","info@joshdevins.net",,
New email address, jitr.org address is not working yet.
> Sync jitr.org release repository
> --------------------------------
>
> Key: MAVENUPLOAD-2405
> URL: http://jira.codehaus.org/browse/MAVENUPLOAD-2405
> Project: Maven Upload Requests
> Issue Type: Wish
> Reporter: Josh Devins
> Assignee: Brian Fox
>
> "org.jitr","mavensync@web.sourceforge.net:/home/groups/j/ji/jitr/htdocs/repositories/release","rsync_ssh","Josh Devins","joshdevins@jitr.org",,
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira