On 26 Jun 07, at 3:09 PM 26 Jun 07, Arnaud HERITIER wrote:
I don't think that it could be problem in the gpg plugin. I
copied/adapted its code in the artifact plugin for m1 and it seems to
work fine (but we don't have to move artifacts between repos)
I'm trying some installs and deploys, and I don't think it's
affecting anything that isn't a POM. I'm going on the hunch there is
a rename problem somewhere along the way. I'll keep hunting.
Arnaud
On 26/06/07, Jason van Zyl <[EMAIL PROTECTED]> wrote:
On 26 Jun 07, at 2:23 PM 26 Jun 07, Jason van Zyl wrote:
>
> On 26 Jun 07, at 1:27 PM 26 Jun 07, Carlos Sanchez wrote:
>
>> The checksums and signature don't match the pom
>>
>> http://jira.codehaus.org/browse/MEV-530
>>
>
> It's not just that it's all of them.
By this I mean POMs. The 2.0.7 Maven parent POM has a bad signature.
I haven't tried anything else but looking at the code it looks like
it might be a renaming problem i.e. not being signed in the same form
and renamed together.
> I checked the staging repository and the production repository and
> the signature is bad in both places and all the files identical in
> both places. So it's being generated incorrectly, or being
> corrupted during the deployment. If I sign it from the command line
> the signature is fine. The key I generate from the command line and
> what's in the repo aren't even vaguely similar. I will take a look
> at the GPG plugin. That's my first guess.
>
>> --
>> I could give you my word as a Spaniard.
>> No good. I've known too many Spaniards.
>> -- The Princess Bride
>>
>>
---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>
> Thanks,
>
> Jason
>
> ----------------------------------------------------------
> Jason van Zyl
> Founder and PMC Chair, Apache Maven
> jason at sonatype dot com
> ----------------------------------------------------------
>
>
>
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
Thanks,
Jason
----------------------------------------------------------
Jason van Zyl
Founder and PMC Chair, Apache Maven
jason at sonatype dot com
----------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
..........................................................
Arnaud HERITIER
..........................................................
OCTO Technology - [EMAIL PROTECTED]
www.octo.com | blog.octo.com
..........................................................
ASF - [EMAIL PROTECTED]
www.apache.org | maven.apache.org
...........................................................
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Thanks,
Jason
----------------------------------------------------------
Jason van Zyl
Founder and PMC Chair, Apache Maven
jason at sonatype dot com
----------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
