Re: Maven plugin for code signing @Apache

2015-10-20 Thread Maxim Solodovnik
gt; > > > > > > but still there is no maven plugin for doing that :( > > > > > > I never wrote maven plugins and need more time to write "Hello > > world" > > > > > level > > > > > > plugins before I can fix/create a

Re: Maven plugin for code signing @Apache

2015-10-19 Thread Maxim Solodovnik
Hello Hervé, We are using "ASF key" to sign our webstart application, this way it is started without error in modern Java Currently we are using lots of manual steps to sign necessary jars using ASF service I thought maybe Maven can do it on my behalf :) On Sun, Oct 18, 2015 at 12:14 PM, Hervé

Re: Maven plugin for code signing @Apache

2015-10-19 Thread Tibor Digana
As I am reading your discussion, I am a little bit scared. Maxim you use your own ASK key? On Mon, Oct 19, 2015 at 8:02 AM, Maxim Solodovnik wrote: > Hello Hervé, > > We are using "ASF key" to sign our webstart application, this way it is > started without error in modern

Re: Maven plugin for code signing @Apache

2015-10-19 Thread Maxim Solodovnik
Now I'm a little bit scared :) Our release process is documented here [1] part "Step3 - Sign web start application" describes the current process of signing jar files. (all current stable releases uses ant, dev releases are using maven) [1] http://openmeetings.apache.org/ReleaseGuide.html On

Re: Maven plugin for code signing @Apache

2015-10-19 Thread Tibor Digana
gt; world" > > > > level > > > > > plugins before I can fix/create anything :) > > > > > > > > > > Maybe anyone is interested to write maven plugin so code can be > > signed > > > at > > > > > Apache? :) > > > > > > > > >

Re: Maven plugin for code signing @Apache

2015-10-18 Thread Hervé BOUTEMY
yes, people doing Eclipse plugins can benefit from such ASF key (instead of the personal key used with gpg on "classical" jars) then: Windows executables, Eclipse plugins this does not give a lot of use cases of this signing tools for projects using Maven at ASF... Regards, Hervé Le dimanche

Re: Maven plugin for code signing @Apache

2015-10-18 Thread Hervé BOUTEMY
Hi, Perhaps the "code signing" feature for jars should be explained, since we already have maven-gpg-plugin [1] to sign code, that is used for years with great success. >From what I read on ASF signing, it adds a feature for Windows executables, that is checked by the OS at runtime and

Re: Maven plugin for code signing @Apache

2015-10-18 Thread Benson Margulies
Eclipse checks that sort of signature on jar files, as I recall. On Sun, Oct 18, 2015 at 2:14 AM, Hervé BOUTEMY wrote: > Hi, > > Perhaps the "code signing" feature for jars should be explained, since we > already have maven-gpg-plugin [1] to sign code, that is used for

Maven plugin for code signing @Apache

2015-10-08 Thread Maxim Solodovnik
Hello All, More than a year ago INFRA announce availability of code signing at Apache: https://blogs.apache.org/infra/entry/code_signing_service_now_available but still there is no maven plugin for doing that :( I never wrote maven plugins and need more time to write "Hello world" level plugins

Re: Maven plugin for code signing @Apache

2015-10-08 Thread Maxim Solodovnik
> > Gruss > Bernd > -- > http://bernd.eckenfels.net > > -Original Message- > From: Maxim Solodovnik <solomax...@gmail.com> > To: Maven Developers List <dev@maven.apache.org> > Sent: Do., 08 Okt. 2015 8:26 > Subject: Maven plugin for code signing @Apache > >

Re: Maven plugin for code signing @Apache

2015-10-08 Thread ecki
work with hardware tokens installed in CI servers.] Gruss Bernd -- http://bernd.eckenfels.net -Original Message- From: Maxim Solodovnik <solomax...@gmail.com> To: Maven Developers List <dev@maven.apache.org> Sent: Do., 08 Okt. 2015 8:26 Subject: Maven plugin for code sig