> > > One way to do it would be to use a small signing application that sits
> > > in front of a maven repository.
> >
> > The problem with this (if I understand it correctly) is that we don't
> > want signed jars unless they're going into the webstart app. It actually
> > creates problems with some tools.
>
> by "in front ot a maven repository" I meant that the application signs
> the jars by picking them from a repository and returns the jars to the
> client code that can then do something with them. So you only create
> them when you need them and you don't put them in your repository when
> you don't need them. The signing application can provide the caching.
>
> Look at the URLs I provided for more info.
I did. The "in front of the repository" phrase made me think that you mean
like a "proxy-cache", that automatically signs jars and acts as a repository.
To me, that means all the dependency requests would have to go through it,
and I think that would be bad.
No matter what though, we'll need the other change (to say "get your jars
here") :)
---------------------------------------------------------------------
To unsubscribe from this list please visit:
http://xircles.codehaus.org/manage_email
