Hello Hervé, We are using "ASF key" to sign our webstart application, this way it is started without error in modern Java Currently we are using lots of manual steps to sign necessary jars using ASF service I thought maybe Maven can do it on my behalf :)
On Sun, Oct 18, 2015 at 12:14 PM, Hervé BOUTEMY <herve.bout...@free.fr> wrote: > Hi, > > Perhaps the "code signing" feature for jars should be explained, since we > already have maven-gpg-plugin [1] to sign code, that is used for years with > great success. > > From what I read on ASF signing, it adds a feature for Windows executables, > that is checked by the OS at runtime and displayed to end-users. > > For jars, I don't see what we get better than gpg. > What I suppose is that if a plugin is done, it will be an Apache-specific > plugin: not same interest than doing a plugin for general public use. > > What do you expect from this signing feature for jars? > > Regards, > > Hervé > > [1] http://maven.apache.org/plugins/maven-gpg-plugin/ > > Le jeudi 8 octobre 2015 12:26:57 Maxim Solodovnik a écrit : > > Hello All, > > > > More than a year ago INFRA announce availability of code signing at > Apache: > > https://blogs.apache.org/infra/entry/code_signing_service_now_available > > > > but still there is no maven plugin for doing that :( > > I never wrote maven plugins and need more time to write "Hello world" > level > > plugins before I can fix/create anything :) > > > > Maybe anyone is interested to write maven plugin so code can be signed at > > Apache? :) > > > > Thanks in advance! > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > > -- WBR Maxim aka solomax
