I believe they need to be signed with a key included on keystore
*1-* Use java key tool:
keytool -genkey -keyalg RSA -alias my-key-alias-key -keystore keystore.jks
-validity 365
*2-* Include on pom.xml
<plugin>
<groupId>org.apache.netbeans.utilities</groupId>
<artifactId>nbm-maven-plugin</artifactId>
<version>4.7</version>
<extensions>true</extensions>
<configuration>
<netbeansInstallation>${netbeansInstalationPath}</netbeansInstallation> -->
<keystore>${basedir}/keystore.jks</keystore>
<keystorepassword>${keypass}</keystorepassword>
<keystorealias>my-key-alias-key</keystorealias>
</configuration>
</plugin>
....
Em seg., 30 de jan. de 2023 às 15:03, Matthias Bläsing
<[email protected]> escreveu:
> Hi,
>
> I asked for reverification of three plugins. These plugins:
>
> - PlantUML-NB
> - LDIF Editor
> - LDAP Explorer
>
> are verified for NB 11.0/12.0 till NB 16 version. Nothing was changed
> on the plugins for 17 and now the plugins are not good enough anymore.
> So what is going on?
>
> They are rejected, because they are not signed, fine, but then why is
> that an issue? The signatures gain you nothing as there is no trust
> anchor, we don't distribute blocked author certificates and the
> download from plugin portal is protected by the checksums.
>
> This is bogus, so what changed and why was this not communicated? I
> assume, that I was not the only one suprised by this. What is more, I'd
> need to do a full release cycle without any code changes, without any
> benefit.
>
> Greetings
>
> Matthias
>
> PS: Jiří I added you to direct CC as I'm not sure how closely you
> monitor dev@
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>
--
Moacir R.F
Desenvolvedor de Softwares
https://www.moacirrf.com.br <http://www.moacirrf.com.br>
