On 1/26/2016 5:20 AM, Peter Klügl wrote:
> Hi,
>
> Am 25.01.2016 um 21:33 schrieb Marshall Schor:
>> I only got to the point of setting up a way to log into the symantec site,
>> where
>> I can apparently add other users, and do some other things.
>>
>> To integrating this into our Apache UIMA build, I think the following needs
>> to
>> be figured out:
>>
>> 1) what Jars to sign. The only Jars we need signed in this way I think are
>> the
>> Eclipse Plugins (and maybe the Feature Jars - but I would be surprised...).
> I would assume that feature jar also need to be signed.
> See the sample code here:
> http://www.ibm.com/developerworks/library/os-eclipse-plugin-sigs/
>
>> 2) The build process for the plugins is complicated by the fact that both
>> "packed" and "regular" Jars are built. The signing has to happen after all
>> of
>> that has finished, I think. I remember a long time ago reading something on
>> the
>> Eclipse websites about signing Eclipse things - that might be a place to
>> start.
> This is probably http://wiki.eclipse.org/JAR_Signing
>
>> 3) There was an ant task done - by some other project - but I haven't looked
>> at
>> it. The mail archives has some pointers (I think I may have copied info
>> about
>> this into a previous email). We probably should start a UIMA website page to
>> collect all this info...
> Should we just copy the implementation to some of our (build) projects?
It would be good to automate this of course. I think that would take using the
SOAP interface with the Ant script done by the Apache TomCat project.
However, some basic info on our web site for posterity once we forget how this
all works would be good - pointers to other pages that describe how it all
works, how to use the test stuff, etc.
-Marshall
>
> Best,
>
> Peter
>
>> I'll do some digging to see if I can add Peter as a signer and send him the
>> credentials. The protocol used by Apache Infra was to send this info
>> encrypted,
>> so I'll do that.
>>
>> -Marshall
>
