[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17736878#comment-17736878 ] Vladimir Sitnikov commented on MNG-7776: The checksums exits for artifacts, so it is not clear why

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17736874#comment-17736874 ] Vladimir Sitnikov commented on MNG-7776: If only all the servers used TLS > don't fingerprint

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17736873#comment-17736873 ] Michael Osipov commented on MNG-7776: - TLS comes with integrity check otherwise how to very messages?

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17736869#comment-17736869 ] Vladimir Sitnikov commented on MNG-7776: Checksums for {{.sigstore}} files would help for verifying

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17728609#comment-17728609 ] Herve Boutemy commented on MNG-7776: you're right, MNG-7769 upgrading to resolver 2.9.10 got

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718176#comment-17718176 ] Herve Boutemy commented on MNG-7776: project-specific setting tested in

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718021#comment-17718021 ] Michael Osipov commented on MNG-7776: - Any quoting is unnecessary for the {{mvn.config}}, this is only

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718019#comment-17718019 ] Herve Boutemy commented on MNG-7776: thanks for the hint, it works with

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718017#comment-17718017 ] Tamas Cservenak commented on MNG-7776: -- Try -D"xxx=zzz" or create mresolver issue and assign it to

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718015#comment-17718015 ] Herve Boutemy commented on MNG-7776: notice that I just tried and I can't find how to define multiple

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17718014#comment-17718014 ] Herve Boutemy commented on MNG-7776: that's what I expected: one can configure it in his project = I

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17717941#comment-17717941 ] Tamas Cservenak commented on MNG-7776: -- Correct, is settable in mvn/maven.config too > don't

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17717935#comment-17717935 ] Michael Osipov commented on MNG-7776: - @cstamas > don't fingerprint Sigstore signatures (like GPG) >

[jira] [Commented] (MNG-7776) don't fingerprint Sigstore signatures (like GPG)

[ https://issues.apache.org/jira/browse/MNG-7776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17717934#comment-17717934 ] Michael Osipov commented on MNG-7776: - That's not really a Maven issue and you can tweak Resolver