Am Mittwoch, den 09.08.2006, 00:15 -0400 schrieb Noel J. Bergman: > Stefano, > > > The problem is that downloading this artifacts directly from > > java.sun.com gives you signed jars including the OLD license file. > > Yes, Sun still has issues coming to grips with its own changes. I still can't believe :-(
> > > To obtain binary/source JARs including the new CDDL license we have to > > use the maven-repository where the glassfish project deploy the artifacts > > > This jars are not signed by sun. > > I know, and I am *NOT* happy about it. Sun's own signing keys are (quite > properly) kept secure, and not used for java.net. But I'm hoping to > convince Bill Shannon to join our WoT, and sign the files that he posts. > For example, I signed David Van Couvering's key, and he could sign Bill's. > > In the meantime, I have spoken with Bill, and he tells me that those are the > jars that he posted there, and only Glassfish developers (~180) (are > supposed to) have write access to that repository area on java.net. > > So if you'll download and commit those to SVN, I'll ask Bill to please > verify that what we have in SVN is what he posted. I just did this so plz ask him to review so we can move forward to rc2. > > > This would really simplify the job of building james from subversion > > using only ant. > > Always a good thing. :-) > > --- Noel bye Norman
signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
