Hello,
I tried to get my plugin (https://plugins.netbeans.apache.org/catalogue/?id=97)
verified in Plugin Portal for Netbeans 22, but got
the following result:
~~~/~~~
Hello plugin owner,
this is to inform you that publishing of your plugin on the Plugin Portal
Update Center was NOT approved. Please read comments from plugin verifiers
below, if any.
Plugin: nb-edit-externally
NetBeans version: 22
Verification status: NOGO
Comments: NBM not signed. Please sign (self signed is ok) and resubmit
Do not give up though. Address the comment(s), upload new binary of your
plugin and request the verification again!
Good luck!
~~~/~~~
The same plugin was correctly verified for all older versions of Netbeans
up to Netbeans 21.
I tried to look up how other plugins handle this and found that the “NetBeans
CSV Editor” plugin (https://plugins.netbeans.apache.org/catalogue/?id=1) was
verified for Netbeans 22. But in the pom it does it exactly as I do in the pom
for my plugin. Also when trying to install that plugin Netbeans tells me that
that plugin is unsigned as well.
So I have the following questions:
- Is having a the nbm file signed actually a requirement for Netbeans 22?
- If yes, why was the “Netbeans CSV Editor” plugin verified despite not
being signed?
- If yes, this requirement should be mentioned on the wiki page for
netbeans plugins
(https://cwiki.apache.org/confluence/display/NETBEANS/How+to+get+plugin+on+Plugin+Portal+Update+Center)
- If yes, please provide an example on how to actually do this? For example
I have seen other plugins using the nbm-maven-plugin for signing, but
include the keystore in their git repo. This seems to counter the purpose
of signing to me. But having the keystore _not_ included in the
repository makes it extremely unhandy to handle this signing part.
Also what benefit does it provide having an nbm file signed if is only
self signed and cannot be verified anyway?
Wouldn’t it make sense to sign all plugins that are distributed via the
official Netbeans Plugin Portal with a key from Netbeans?
Sorry for this load of questions, but I am genuinely unsure on how to
handle this.
Best regards
Marco
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org
For additional commands, e-mail: users-h...@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
