Hi,

in context of expired spotbugs certificate (see 
https://github.com/spotbugs/spotbugs/issues/2008) 

I'm looking for pointers (wiki/blog/help page) about how one can "sign" Eclipse 
bundles with pgp? 

Google finds few bugs but no explanation to following questions :

- prerequisites (which Eclipse version supports that)
- build requirements (which tooling needed, on which platform etc)
- instructions for signing itself (command line etc)
- which side effects ot has on compatibility with old Eclipse platforms (can 
pgp signed bundle be installed on older Eclipse that doesn't know anything 
about pgp)

These below seem to be related but don't give answers to questions above:
https://bugs.eclipse.org/bugs/show_bug.cgi?id=576895
https://bugs.eclipse.org/bugs/show_bug.cgi?id=572816

Is there any official documentation available ?
--
Kind regards,
Andrey Loskutov

https://www.eclipse.org/user/aloskutov
Спасение утопающих - дело рук самих утопающих
_______________________________________________
platform-dev mailing list
platform-dev@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/platform-dev

Reply via email to