Great questions and concerns, Neil. > Also, what are the barriers to having nb-javac signed in such a way > that it doesn't provoke a self-signed warning for NetBeans end users?
+10, the module should be properly signed! Apache can't sign it itself. Somebody else has to. Currently Reema and co. do sign the module. I am fine with that, we just need to make sure it is recognized as regularly (e.g. not self) signed. There are two ways: - Reema & co. can obtain signing certificate from an approved signing authority - or we can take Reema & co. public key and add it to the list of trusted keys in the Apache NetBeans > Not sure if I've missed some info somewhere, but is a source repo link > and relevant tag for the nb-javac that users are prompted to install > documented somewhere they (or I for that matter) can easily find? Instructions how to build nbjavac are desirable. It would be good if the repository URL and revision was part of the NBM or JAR file. > Is > it still at http://hg.netbeans.org/main/nb-javac ? What revision / > branch? Specifically I'm personally looking at updating my IDE > project to use NetBeans 9.0 but want to ship with nb-javac > pre-included. Download it from update center automatically with the autoupdate Ant task. That's what we do in Oracle Labs. -jt --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
