slachiewicz opened a new pull request, #1792: URL: https://github.com/apache/maven-site/pull/1792
Covers items 21, 22 and 23 of Martijn Dashorst's [discrepancies list](https://github.com/dashorst/maven-site/blob/diataxis-demo/jekyll/pages/discrepancies.md) on *Password Encryption (Maven 4)*: * The `version` in an encrypted value is the specification version of the bundled plexus-sec-dispatcher (`SecUtil.specVersion()`), so 4.0.0-rc-7 writes `version=4.2`, not the `version=4.0` the page shows. The format now uses `<version>` and says where it comes from. * `mvnenc init` offers sources such as an environment variable with a placeholder (`env:$VARIABLE_NAME`) that has to be replaced; the page now says so. * The legacy dispatcher reads only the `<master>` element and does not follow a Maven 3 `<relocation>`; with one, Maven 4 stops with "Could not decrypt password". If the dispatcher learns to follow relocations, that sentence goes. Verified on 4.0.0-rc-7, with `mvnenc` driven through a pseudo-terminal: `mvnenc encrypt` → `{[name=master,cipher=AES/GCM/NoPadding,version=4.2]…}`; a proxy password encrypted with a relocated Maven 3 master password → 3.10.0 BUILD SUCCESS, 4.0.0-rc-7 "Could not decrypt password … for proxy p"; the same master password without relocation → BUILD SUCCESS on 4.0.0-rc-7. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
