Re: Maven plugin for code-singing. Where to host?
On 19/01/18 10:56, Robert Munteanu wrote: > On Fri, 2018-01-19 at 09:27 +, Mark Thomas wrote: >> On 18/01/18 21:48, Robert Munteanu wrote: >>> Hi, >>> >>> (Please keep me in CC, I'm not subscribed to this list) >>> >>> I have developed a Maven plugin to use with Symantec's code >>> signing. >>> Currently it is hosted by the Apache Sling project at [1] but >>> that's >>> not a proper home for it. >>> >>> The code is a blatant copy-paste of the Tomcat Ant task with a >>> couple >>> of fixes, so in the future I hope to unify them - but first I'd >>> like to >>> find the best location for it for the code. >>> >>> I don't think Tomcat is necessarily the best place to host the code >>> that's potentially useful ASF-wide, but it does not hurt to ask for >>> opinions :-) >> >> I'd agree not here since we wouldn't use the plug-in. >> >> Given the code (plug-in and my Ant task) is pretty much done >> (although >> I'm sure there is plenty of scope to improve the code I wrote) and >> there >> have only been 2 developers I'm not sure a TLP is viable. However, a >> TLP >> probably needs to be involved as releases are required. >> >> I guess there is some work to extract the common code and provide the >> Ant task and the Maven plug-in in a single JAR. >> >> Hmm. >> >> Maven plug-in. Ant task. Written in Java. Used by multiple projects. >> Mature code. Ideally needs to be released. Primary audience is Apache >> projects. >> >> How about Commons? It isn't a perfect fit but it looks to be the best >> fit. > > Commons sounds good to me. For the sake of completeness, Brian Demers > suggested Creadur on users@infra . This main issue with Creadur is that the code signing would be out of scope (scope is set by the board resolution that establishes the PMC). > Commons sounds good to me, just like Creadur. I would slightly incline > towards Commons, since - as you mentioned - the audience is primarily > Apache projects, but not exclusively. > > How would this contribution proceeed? One way would be for Tomcat to > contribute the current implementation and then I could refactor that > into a reusable component and submit the Maven plugin as well. If you aren't already, subscribe to dev@commons.a.o. I'll raise this there shortly. Starting with the Tomcat class and then refactoring would work for me. Mark - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: Maven plugin for code-singing. Where to host?
On Fri, 2018-01-19 at 09:27 +, Mark Thomas wrote: > On 18/01/18 21:48, Robert Munteanu wrote: > > Hi, > > > > (Please keep me in CC, I'm not subscribed to this list) > > > > I have developed a Maven plugin to use with Symantec's code > > signing. > > Currently it is hosted by the Apache Sling project at [1] but > > that's > > not a proper home for it. > > > > The code is a blatant copy-paste of the Tomcat Ant task with a > > couple > > of fixes, so in the future I hope to unify them - but first I'd > > like to > > find the best location for it for the code. > > > > I don't think Tomcat is necessarily the best place to host the code > > that's potentially useful ASF-wide, but it does not hurt to ask for > > opinions :-) > > I'd agree not here since we wouldn't use the plug-in. > > Given the code (plug-in and my Ant task) is pretty much done > (although > I'm sure there is plenty of scope to improve the code I wrote) and > there > have only been 2 developers I'm not sure a TLP is viable. However, a > TLP > probably needs to be involved as releases are required. > > I guess there is some work to extract the common code and provide the > Ant task and the Maven plug-in in a single JAR. > > Hmm. > > Maven plug-in. Ant task. Written in Java. Used by multiple projects. > Mature code. Ideally needs to be released. Primary audience is Apache > projects. > > How about Commons? It isn't a perfect fit but it looks to be the best > fit. Commons sounds good to me. For the sake of completeness, Brian Demers suggested Creadur on users@infra . Commons sounds good to me, just like Creadur. I would slightly incline towards Commons, since - as you mentioned - the audience is primarily Apache projects, but not exclusively. How would this contribution proceeed? One way would be for Tomcat to contribute the current implementation and then I could refactor that into a reusable component and submit the Maven plugin as well. Thanks, Robert - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Re: Maven plugin for code-singing. Where to host?
On 18/01/18 21:48, Robert Munteanu wrote: > Hi, > > (Please keep me in CC, I'm not subscribed to this list) > > I have developed a Maven plugin to use with Symantec's code signing. > Currently it is hosted by the Apache Sling project at [1] but that's > not a proper home for it. > > The code is a blatant copy-paste of the Tomcat Ant task with a couple > of fixes, so in the future I hope to unify them - but first I'd like to > find the best location for it for the code. > > I don't think Tomcat is necessarily the best place to host the code > that's potentially useful ASF-wide, but it does not hurt to ask for > opinions :-) I'd agree not here since we wouldn't use the plug-in. Given the code (plug-in and my Ant task) is pretty much done (although I'm sure there is plenty of scope to improve the code I wrote) and there have only been 2 developers I'm not sure a TLP is viable. However, a TLP probably needs to be involved as releases are required. I guess there is some work to extract the common code and provide the Ant task and the Maven plug-in in a single JAR. Hmm. Maven plug-in. Ant task. Written in Java. Used by multiple projects. Mature code. Ideally needs to be released. Primary audience is Apache projects. How about Commons? It isn't a perfect fit but it looks to be the best fit. Mark > > Thanks, > > Robert > > [1]: https://github.com/apache/sling-whiteboard/tree/master/codesign > > - > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
Maven plugin for code-singing. Where to host?
Hi, (Please keep me in CC, I'm not subscribed to this list) I have developed a Maven plugin to use with Symantec's code signing. Currently it is hosted by the Apache Sling project at [1] but that's not a proper home for it. The code is a blatant copy-paste of the Tomcat Ant task with a couple of fixes, so in the future I hope to unify them - but first I'd like to find the best location for it for the code. I don't think Tomcat is necessarily the best place to host the code that's potentially useful ASF-wide, but it does not hurt to ask for opinions :-) Thanks, Robert [1]: https://github.com/apache/sling-whiteboard/tree/master/codesign - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
