jira-importer commented on issue #154:
URL: 
https://github.com/apache/maven-jar-plugin/issues/154#issuecomment-2956673720

   **[Jerome 
Lacoste](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=lacostej)**
 commented
   
   > The problem seems to be that jarsigner is called with -verify - although 
I'm explicitely turning it of in plugin configuration.
   
   I have a feeling that the attached patch is not enough right way to fix the 
issue,
   
   The exception should be thrown by default and a user flag should be there to 
allow bypassing the failed check.
   Also the log message should be warn instead of info. Patch coming.
   
   Finally you could also try to remove signatures (try the webstart:unsign 
mojo)
   
   Another solution was for JarSignVerifyMojo to not throw an exception when 
errorWhenNotSigned is true, which I didn't like much,
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to