[MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
Hi all guys,

I'm using Maven Jar signer ver. 1.3.1 plugin and for security reasons I've
encrypted the key store password with Maven encryption mechanism. All works
fine, but if I enable verbose output, it print out the command line with
the keystore password in clear text.

here is an example:

[INFO] cmd.exe /X /C C:\Program
Files\Java\jdk1.7.0_51\jre\..\bin\jarsigner.exe -verbose -keystore
mc-keystore -storepass mypassword


is it possible to obfuscate the password?

thanks a lot

--
Marco Speranza marcospera...@apache.org

http://code.google.com/u/marco.speranza79/


Re: [MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
2014-02-05 Tony Chemit che...@codelutin.com:

 Can you create the issue for this; I will have a look at it.



done: http://jira.codehaus.org/browse/MJARSIGNER-35

thanks a lot


--
Marco Speranza marcospera...@apache.org
Google Code: http://code.google.com/u/marco.speranza79/


[MDEP-332] - Add skip parameter to unpack-dependency

2012-04-11 Thread Marco Speranza
Hi all,

I'm using dependency plugin into a parent pom and I need to make optional the 
unpack-dependency goal.
I noticed that there was an opened issue into jira and I prepared a little 
patch that fix it.

Can I attach the patch to the jira issue?

thanks in advice

--
Marco Speranza marcospera...@apache.org
Google Code: http://code.google.com/u/marco.speranza79/



signature.asc
Description: Message signed with OpenPGP using GPGMail