RE: How to use a different signing mechanism with maven-gpg-plugin

2023-02-20 Thread Railean, Alexander
Tamás, Martin - thank you for your quick feedback. It gave me certainty that the objective can be accomplished. > if you can use your GPG CLI with your HSM, this could or should be possible, > as maven-gpg-plugin really just invokes the CLI (the gpg executable). The HSM doesn't provide such an

Re: How to use a different signing mechanism with maven-gpg-plugin

2023-02-15 Thread Martin Höller
Hi! On 15. Feb. 2023 Railean, Alexander wrote: [...] > After I sign the jar using utilities provided by the HSM, is there a way to > tell maven-gpg-plugin to use existing signature of the jar and upload it to > the server? (instead of trying to produce its own) > > Alternatively, maybe you can

Re: How to use a different signing mechanism with maven-gpg-plugin

2023-02-15 Thread Tamás Cservenák
Howdy, if you can use your GPG CLI with your HSM, this could or should be possible, as maven-gpg-plugin really just invokes the CLI (the gpg executable). HTH T On Wed, Feb 15, 2023 at 12:50 PM Railean, Alexander < alexander.rail...@siemens.com> wrote: > Hi everyone, > > > > I am looking for a

How to use a different signing mechanism with maven-gpg-plugin

2023-02-15 Thread Railean, Alexander
Hi everyone, I am looking for a way to use maven-gpg-plugin in conjunction with a Hardware Security Module (HSM) for the process of publishing digitally signed artifacts on Maven Central. After reading the documentation I am under the impression that the plugin assumes that it has the