+1 - and I would expect we also see a Server-side component. BTW: Eclipse also has some infrastructure for this (we use a modified Version with a PHP backend on-prem)
http://git.eclipse.org/c/cbi/org.eclipse.cbi.git/tree/maven-plugins/README.md Gruss Bernd -- http://bernd.eckenfels.net Von: Gary Gregory Gesendet: Mittwoch, 24. Januar 2018 22:05 An: Commons Developers List Betreff: Re: [Signing] New component for code signing +1 Gary On Wed, Jan 24, 2018 at 1:35 AM, Benedikt Ritter <brit...@apache.org> wrote: > Hello Mark, > > +1 In my opinion this is exactly what Commons should be doing. > > Regards, > Benedikt > > Mark Thomas <ma...@apache.org> schrieb am Di., 23. Jan. 2018 um 07:34 Uhr: > > > All, > > > > As you may know, the ASF has been using a code signing service for a > > number of years provided by Symantec. We use it to sign Commons Daemon > > Windows binaries. > > > > The code signing service has a web based GUI and a SOAP based API. > > Tomcat has written an Ant task to use the SOAP API and Sling has taken > > this used and used it as the basis for a Maven plug-in. > > > > Currently, the Ant task is hosted within the Tomcat codebase and the > > Maven plug-in within Sling. Both communities would like to move this to > > a better home where it can more easily be re-used by other Apache > > projects and other organisations using Symantec's code signing service. > > > > After some thought and discussion, we (Robert Munteanu and I) would like > > to propose this code signing component as a new component at Commons. > > Our reasons for this are as follows: > > > > - The code is written in Java > > - It is a relatively small component > > - It is a utility likely to be of interest to multiple Apache projects > > - If it is going to be re-used across multiple projects, it needs to be > > formally released and that requires a PMC > > > > If accepted the plan would be: > > - commit the original Tomcat code for the Ant task > > - refactor it to allow re-use of code common to the Ant task and Maven > > plug-in > > - add the Maven plug-in > > - release it as a single JAR that provided both the Ant task and the > > Maven plug-in > > - Ongoing review and maintenance (there are a couple of areas that could > > benefit from some improvement) > > > > Thoughts? Comments? > > > > Mark > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > > For additional commands, e-mail: dev-h...@commons.apache.org > > > > >
