Repository: incubator-brooklyn
Updated Branches:
  refs/heads/master fdbca1565 -> 738747907


Update pom.xml GnuPG settings

Sets the executable to gpg2, which is the usual name for the latest gpg
versions both on Linux and MacPorts.

Removes the set-empty-passphrase property. With gpg-agent correctly set
up, this means that the signing process will prompt for the GPG
passphrase when it is first needed, and cache the value for the
remainder of the build. This is more secure than writing down a GPG
passphrase either in settings.xml, pom.xml, or anywhere where it might
up in a command line history file.

Setting up gpg-agent in 10 seconds:

- Install a pinentry package. pinentry-mac from MacPorts;
  pinentry-curses if you are remoting into a Linux machine
- Install gpg-agent if not already installed (on Ubuntu you'll need to
  apt-get install gnupg-agent; but on MacPorts it's part of the gnupg2
  package)
- Start the agent:
  - gpg-agent --daemon --write-env-file "${HOME}/.gpg-agent-info"
  - GPG_TTY=$(tty)
  - export GPG_AGENT_INFO GPG_TTY


Project: http://git-wip-us.apache.org/repos/asf/incubator-brooklyn/repo
Commit: 
http://git-wip-us.apache.org/repos/asf/incubator-brooklyn/commit/d8632509
Tree: http://git-wip-us.apache.org/repos/asf/incubator-brooklyn/tree/d8632509
Diff: http://git-wip-us.apache.org/repos/asf/incubator-brooklyn/diff/d8632509

Branch: refs/heads/master
Commit: d8632509dda091e2344a09ae69bed04e212635f5
Parents: fdbca15
Author: Richard Downer <[email protected]>
Authored: Thu Jun 25 16:39:49 2015 +0100
Committer: Richard Downer <[email protected]>
Committed: Fri Jun 26 13:05:23 2015 +0100

----------------------------------------------------------------------
 pom.xml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/incubator-brooklyn/blob/d8632509/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 60b8203..e007484 100644
--- a/pom.xml
+++ b/pom.xml
@@ -216,11 +216,6 @@
         <commons-codec.version>1.9</commons-codec.version>
         <log4j.version>1.2.17</log4j.version>
         <commons-logging.version>1.2</commons-logging.version>
-
-        <!-- Release -->
-        <!-- no passphrase by default, so we can do automated deploy builds;
-             you can still supply your own passphrase with 
-Dgpg.passphrase=XXX -->
-        <gpg.passphrase />
     </properties>
 
     <dependencyManagement>
@@ -711,6 +706,9 @@
                             <goals>
                                 <goal>sign</goal>
                             </goals>
+                            <configuration>
+                                <executable>gpg2</executable>
+                            </configuration>
                         </execution>
                     </executions>
                 </plugin>

Reply via email to