Howard Lewis Ship wrote:
> 
> I was trying a new build script that must have failed.  I'm not sure
> about adding the signatures after the fact, I usually add the sigs via
> the Maven GPG plugin, and I'm not sure I want to upload my private key
> to people.apache.org so that I can apply the signatures there.
> 

The artifacts should still be in your local repository, and you can
'manually' sign those and upload just the signatures to the rsync'd
repository directory.  Pre-GPG plugin I had a script to do this...

(And you're correct, private keys should never be put on ASF hardware.)

Thanks,
-- 
Wendy
-- 
View this message in context: 
http://www.nabble.com/-VOTE--Tapestry-5.0.11-tp15961552p16069824.html
Sent from the Tapestry - Dev mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to