jcompagner commented on PR #1: URL: https://github.com/apache/maven-jarsigner-plugin/pull/1#issuecomment-1849690136
that multi tsa is more important then just a retry, that is because if a tsa service is not working then it can be not working for quite some time (not minutes but more hours or half days....) thats why we use now a patch version of the jarsigner: https://github.com/Servoy/maven-jarsigner-plugin/commit/bcb2b6a4be674f2c21acb2898747732dc93afc7d that does retries but first over all tsa urls that are given (comma separated list) so my jar signer property is something like: <jarsigner.tsa>http://timestamp.sectigo.com,http://rfc3161timestamp.globalsign.com/advanced,http://timestamp.digicert.com</jarsigner.tsa> and then with: <jarsigner.tsaMaxRetry>3</jarsigner.tsaMaxRetry> <jarsigner.tsaRetryDelay>5</jarsigner.tsaRetryDelay> but those last 2 are not that important it could even have retry once, because if the first tsa fails then retrying it over the other 2 will almost all the time work fine -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
