gt; Gesendet: Montag, 28. Dezember 2020 13:09
> An: Maven Developers List
> Betreff: Re: Maven Sign Plugin
>
> Hi,
>
> First version of Sign Maven Plugin was released -
> https://github.com/s4u/sign-maven-plugin
>
> It works with Maven 3.6.x and future version 4.x
>
>
ontag, 28. Dezember 2020 13:09
> An: Maven Developers List
> Betreff: Re: Maven Sign Plugin
>
> Hi,
>
> First version of Sign Maven Plugin was released -
> https://github.com/s4u/sign-maven-plugin
>
> It works with Maven 3.6.x and future version 4.x
>
> If somebody is inte
:09
An: Maven Developers List
Betreff: Re: Maven Sign Plugin
Hi,
First version of Sign Maven Plugin was released -
https://github.com/s4u/sign-maven-plugin
It works with Maven 3.6.x and future version 4.x
If somebody is interested I invite them to test and collaborate.
pon., 14 gru 2020 o 21:42
:
>> >>> > >
>> >>> > > *
>> >>> org.eclipse.aether.RepositorySystemSession#getFileTransformerManager*
>> >>> > > We can use it from maven 3.6 (without overwriting the version of
>> >>> > > maven-resol
t; > > this version. But even in 3.6 and 3.7-SNAPSHOT i have exception
> >>> during
> >>> > > execution:
> >>> > >
> >>> > > [ERROR] Failed to execute goal
> >>> > > org.apache.maven.plugins:m
t; org.apache.maven.plugins:maven-sign-plugin:1.0-SNAPSHOT:sign:
>>> > > org/eclipse/aether/transform/FileTransformerManager
>>> > >
>>> > > So next I try by reflection ... (now looks not good) ... but I have
>>> > > expected result
>>>
>>> > > required class was missing while executing
>>> > > org.apache.maven.plugins:maven-sign-plugin:1.0-SNAPSHOT:sign:
>>> > > org/eclipse/aether/transform/FileTransformerManager
>>> > >
>>> > > So next I try b
; > So when we must use reflection maybe this magic should be done in
>> > separate
>> > > utils like
>> > > *maven-resolver, maven-artifact-transfer *(where we have magic with
>> > > reflections)
>> > > When we prepare a metho
> > the new version of maven will be solved.
> > > Gpg plugin already use *maven-resolver, maven-artifact-transfer*
> > >
> > > Of course we can continue work on the new plugin - but we need more
> time
> > to
> > > develop the first production
i for
> >
> >
> *org.eclipse.aether.transform.FileTransformerManager#getTransformersForArtifact*
> > result is collection of *FileTransformer* so what should happen when we
> > have more then one transformer.
> > In
> >
> >
> https://github.com/apache/mave
>
> >
> *org.eclipse.aether.transform.FileTransformerManager#getTransformersForArtifact*
> > result is collection of *FileTransformer* so what should happen when we
> > have more then one transformer.
> > In
> >
> >
> https://github.com/apache/maven-res
Artifact*
> result is collection of *FileTransformer* so what should happen when we
> have more then one transformer.
> In
>
> https://github.com/apache/maven-resolver/blob/master/maven-resolver-impl/src/main/java/org/eclipse/aether/internal/impl/DefaultInstaller.java#L246
>
when we
> have more then one transformer.
> In
>
> https://github.com/apache/maven-resolver/blob/master/maven-resolver-impl/src/main/java/org/eclipse/aether/internal/impl/DefaultInstaller.java#L246
> result file is overwrited by last transformer from list.
>
> You can look at what I d
did at my fork:
https://github.com/slawekjaranowski/maven-studies/tree/maven-sign-plugin
I'm waiting for a decision on what should be done next ...
sob., 26 wrz 2020 o 11:46 Slawomir Jaranowski
napisał(a):
> Ok, I don't want to reinvent the wheels, so
>
> How to reach handle t
/org/eclipse/aether/internal/impl/DefaultInstaller.java#L246
result file is overwrited by last transformer from list.
You can look at what I did at my fork:
https://github.com/slawekjaranowski/maven-studies/tree/maven-sign-plugin
I'm waiting for a decision on what should be done next ...
Sl
#L246
result file is overwrited by last transformer from list.
You can look at what I did at my fork:
https://github.com/slawekjaranowski/maven-studies/tree/maven-sign-plugin
I'm waiting for a decision on what should be done next ...
sob., 26 wrz 2020 o 11:46 Slawomir Jaranowski
napisał(a):
orary file, which
is likely to cause issues with very creative plugin/extension writers. Instead
we should do in memory signing.
It would make sense to introduce a new plugin, and during a discussion with the
PMC the idea of maven-sign-plugin was proposed (a much better alternative
campared to
; > > In Maven 3.6.x changes have been made to support InputStream next to
> > File.
> > > This way we don't have to create a backdoor of writing a temporary
> file,
> > > which is likely to cause issues with very creative plugin/extension
> > > w
e to support InputStream next to
> File.
> > This way we don't have to create a backdoor of writing a temporary file,
> > which is likely to cause issues with very creative plugin/extension
> > writers. Instead we should do in memory signing.
> >
> > It would mak
n't have to create a backdoor of writing a temporary file,
> > which is likely to cause issues with very creative plugin/extension
> > writers. Instead we should do in memory signing.
> >
> > It would make sense to introduce a new plugin, and during a discussion
> >
Hi,
> I have some experience in case of verifying pgp signatures using Bouncy
> Castle during work on my pgpverify-maven-plugin.
> So If you would, I can try to help with the sign plugin.
using Bouncy Castle or the Apache Commons OpenPGP wrapper thereof [1]
would be awesome and would make the bui
make sense to introduce a new plugin, and during a discussion
> with the PMC the idea of maven-sign-plugin was proposed (a much better
> alternative campared to maven-gpg2-plugin)
>
> Dennis Lundberg started a POC based on Apache Common OpenGPG, however, it
> is still in the sandbox[1]
>
which is likely to cause issues with very creative plugin/extension
> writers. Instead we should do in memory signing.
>
> It would make sense to introduce a new plugin, and during a discussion
> with the PMC the idea of maven-sign-plugin was proposed (a much better
> alternative campared
very creative plugin/extension writers. Instead
we should do in memory signing.
It would make sense to introduce a new plugin, and during a discussion with the
PMC the idea of maven-sign-plugin was proposed (a much better alternative
campared to maven-gpg2-plugin)
Dennis Lundberg started
24 matches
Mail list logo
