Hi David, thank you very much, it helps a lot :) I'm familiar with gpg and the gpg-plugin, but I was not with the Apache way to manage the KEYS. My public Apache key is already on public keyserver:
pub 1024D/19FEA27D 2010-03-24 uid Simone Tripodi (simonetripodi) <[email protected]> sub 4096g/C002CC79 2010-03-24 Thanks for your help! Simo http://people.apache.org/~simonetripodi/ http://www.99soft.org/ On Tue, Jul 6, 2010 at 6:30 PM, David Jencks <[email protected]> wrote: > > On Jul 6, 2010, at 1:45 AM, Simone Tripodi wrote: > >> Hi Pid, >> yes you're right, BTW the actual build is already working even if we >> need to complete the KEYS. The gpg-plugin is already plugged, I need >> to better understand how the KEYS file works with that plugin, if >> someone else already knows it an explanation is more than welcome :) > > They are 100% unrelated. You need to set up a gpg key and tell maven about > it in your ~/.m2/settings.xml file: this is all that the gpg plugin needs. > For it to do anyone any good, they have to be able to verify it's your key: > you do this by registering your key with e.g. the MIT public pgp key server > and putting it in the KEYS file. > > Be sure you have a long enough key :-) > > http://www.apache.org/dev/release-signing.html > > Hope this helps > david jencks > >> Have a nice day, >> Simo >> >> http://people.apache.org/~simonetripodi/ >> http://www.99soft.org/ >> >> >> >> On Tue, Jul 6, 2010 at 10:39 AM, Pid <[email protected]> wrote: >>> Hi, >>> >>> I know it's early and we don't have any actual code to release, but can >>> we get the project set up ready and ready to build now? >>> >>> We need to add KEYS amongst other things. >>> >>> I assume that the poms will need some tweaks too? >>> >>> >>> p >>> >>> > >
