You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Eric TOURNIER (JIRA)" <ji...@codehaus.org> on 2011/04/06 15:53:22 UTC

[jira] Created: (MJARSIGNER-14) Keystore password should be entered in an interactive way

Keystore password should be entered in an interactive way
---------------------------------------------------------

                 Key: MJARSIGNER-14
                 URL: http://jira.codehaus.org/browse/MJARSIGNER-14
             Project: Maven 2.x Jar Signer Plugin
          Issue Type: Improvement
    Affects Versions: 1.2
            Reporter: Eric TOURNIER
            Priority: Minor


For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] (MJARSIGNER-14) Keystore password should be entered in an interactive way

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
    [ https://jira.codehaus.org/browse/MJARSIGNER-14?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=292786#comment-292786 ] 

Olivier Lamy commented on MJARSIGNER-14:
----------------------------------------

Console is @since 1.6.
We try to preserve 1.5 compat.
Can provide something working with 1.5 ? (and with current trunk :-) as your current patch is based on old sources).
Thanks.
                
> Keystore password should be entered in an interactive way
> ---------------------------------------------------------
>
>                 Key: MJARSIGNER-14
>                 URL: https://jira.codehaus.org/browse/MJARSIGNER-14
>             Project: Maven 2.x Jar Signer Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.2
>            Reporter: Eric TOURNIER
>            Priority: Minor
>         Attachments: MJARSIGNER-14-maven-jarsigner-plugin.patch, MJARSIGNER-14-maven-jarsigner-plugin.patch
>
>
> For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Updated: (MJARSIGNER-14) Keystore password should be entered in an interactive way

Posted by "Eric TOURNIER (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MJARSIGNER-14?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Eric TOURNIER updated MJARSIGNER-14:
------------------------------------

    Attachment: MJARSIGNER-14-maven-jarsigner-plugin.patch

This patch asks the user for a keystore password if it not configured in pom.xml
The case of a missing key password is not included in this patch

> Keystore password should be entered in an interactive way
> ---------------------------------------------------------
>
>                 Key: MJARSIGNER-14
>                 URL: http://jira.codehaus.org/browse/MJARSIGNER-14
>             Project: Maven 2.x Jar Signer Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.2
>            Reporter: Eric TOURNIER
>            Priority: Minor
>         Attachments: MJARSIGNER-14-maven-jarsigner-plugin.patch
>
>
> For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] (MJARSIGNER-14) Keystore password should be entered in an interactive way

Posted by "Eric TOURNIER (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MJARSIGNER-14?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Eric TOURNIER updated MJARSIGNER-14:
------------------------------------

    Attachment: MJARSIGNER-14-maven-jarsigner-plugin.patch
    
> Keystore password should be entered in an interactive way
> ---------------------------------------------------------
>
>                 Key: MJARSIGNER-14
>                 URL: https://jira.codehaus.org/browse/MJARSIGNER-14
>             Project: Maven 2.x Jar Signer Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.2
>            Reporter: Eric TOURNIER
>            Priority: Minor
>         Attachments: MJARSIGNER-14-maven-jarsigner-plugin.patch, MJARSIGNER-14-maven-jarsigner-plugin.patch
>
>
> For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] (MJARSIGNER-14) Keystore password should be entered in an interactive way

Posted by "Eric TOURNIER (JIRA)" <ji...@codehaus.org>.
    [ https://jira.codehaus.org/browse/MJARSIGNER-14?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=290486#comment-290486 ] 

Eric TOURNIER commented on MJARSIGNER-14:
-----------------------------------------

Here is a second patch which asks the user for both storepass and keypass without echoing them.
                
> Keystore password should be entered in an interactive way
> ---------------------------------------------------------
>
>                 Key: MJARSIGNER-14
>                 URL: https://jira.codehaus.org/browse/MJARSIGNER-14
>             Project: Maven 2.x Jar Signer Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.2
>            Reporter: Eric TOURNIER
>            Priority: Minor
>         Attachments: MJARSIGNER-14-maven-jarsigner-plugin.patch
>
>
> For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://jira.codehaus.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Issue Comment Edited: (MJARSIGNER-14) Keystore password should be entered in an interactive way

Posted by "Eric TOURNIER (JIRA)" <ji...@codehaus.org>.
    [ http://jira.codehaus.org/browse/MJARSIGNER-14?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=262674#action_262674 ] 

Eric TOURNIER edited comment on MJARSIGNER-14 at 4/7/11 4:07 AM:
-----------------------------------------------------------------

This patch asks the user for a keystore password if it is not configured in pom.xml
The case of a missing key password is not included in this patch

      was (Author: eric_t):
    This patch asks the user for a keystore password if it not configured in pom.xml
The case of a missing key password is not included in this patch
  
> Keystore password should be entered in an interactive way
> ---------------------------------------------------------
>
>                 Key: MJARSIGNER-14
>                 URL: http://jira.codehaus.org/browse/MJARSIGNER-14
>             Project: Maven 2.x Jar Signer Plugin
>          Issue Type: Improvement
>    Affects Versions: 1.2
>            Reporter: Eric TOURNIER
>            Priority: Minor
>         Attachments: MJARSIGNER-14-maven-jarsigner-plugin.patch
>
>
> For security reasons, it could be useful not to configure keystore password in the {{pom.xml}} file. Then, when these informations are missing, the plugin should ask the user to enter this password in an interactive way.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira