[ 
https://issues.apache.org/jira/browse/IVY-1553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15748180#comment-15748180
 ] 

jaikiran pai commented on IVY-1553:
-----------------------------------

[~haqer], I checked the documentation around this here 
https://ant.apache.org/ivy/history/latest-milestone/settings/signers.html. It 
says:

{quote}
Remark: This generator uses the BouncyCastle OpenPGP library. Before this 
generator can be used, these libraries must be available on Ivy's classpath.
{quote}

Notice that it says Ivy's classpath, which I take it to mean the classpath used 
to trigger the Ivy command itself and not the dependencies configured for the 
project being built by Ivy. So adding bouncycastle dependencies to the project 
being built wouldn't have any effect IMO.


> PGP signing during publication shouldn't require bouncy castle dependencies 
> to be in .ant/lib or forking another java process with classpath explicitly 
> configured to contain bouncy castle modules
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: IVY-1553
>                 URL: https://issues.apache.org/jira/browse/IVY-1553
>             Project: Ivy
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 2.4.0
>            Reporter: Reşat SABIQ
>              Labels: pgp
>
> With
>               <signers>
>                       <pgp name="default-sig" keyId="${pgp.key}" 
> password="${pgp.password}"/> 
>               </signers>
> in ivysettings.xml,
> ivy kept throwing CNFE until i put these dependencies in .ant/lib:
>               <dependency org="org.bouncycastle" name="bcpg-jdk15on" 
> rev="1.49" conf="default"/>
>               <dependency org="org.bouncycastle" name="bcprov-jdk15on" 
> rev="1.49" conf="default"/>
> I ended up putting the following comment in ivy.xml:
>               <!-- First 2 currently must be in .ant/lib (pgp signer didn't 
> work via dependency or ivycache manipulation, etc). -->
> P.S. I believe this issue is ongoing since 2012/13.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to