[mojo-dev] [jira] (MWEBSTART-274) Use the Maven Encryption functionality to encrypt passwords used for the DefaultSignTool

[Nico De Groote (JIRA)]

Title: Message Title

Nico De Groote created an issue   Mojo's Webstart Maven Plugin / MWEBSTART-274 Use the Maven Encryption functionality to encrypt passwords used for the DefaultSignTool Issue Type: Wish Affects Versions: 1.0-beta-6 Assignee: Unassigned Components: sign Created: 02/Jun/14 8:16 AM Priority: Major Reporter: Nico De Groote Make us of the Maven Encryption functionality (http://maven.apache.org/guides/mini/guide-encryption.html) Make the SignConfig contain passwords which has been encrypted by the maven masterPassword. Decrypt this password when creating the sign request. This way the 'real' password are not kept in the poms. You can achieve this by injecting the @Requirement(role = SecDispatcher.class, hint = "mng-4384") private DefaultSecDispatcher secDispatcher; into your DefaultSignTool and setting this tool on the SignConfig before requesting for a request on the SignConfig object. In the object itself you then return the correct value (encrypted/decrypted etc). Add Comment   This message was sent by Atlassian JIRA (v6.1.6#6162-sha1:7af547c) --------------------------------------------------------------------- To unsubscribe from this list, please visit: http://xircles.codehaus.org/manage_email