[MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
Hi all guys, I'm using Maven Jar signer ver. 1.3.1 plugin and for security reasons I've encrypted the key store password with Maven encryption mechanism. All works fine, but if I enable verbose output, it print out the command line with the keystore password in clear text. here is an example:

Re: [MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Tony Chemit
On Wed, 5 Feb 2014 12:38:04 + Marco Speranza marcospera...@apache.org wrote: Hi all guys, hi Marco, I'm using Maven Jar signer ver. 1.3.1 plugin and for security reasons I've encrypted the key store password with Maven encryption mechanism. All works fine, but if I enable verbose

Re: [MJARSIGNER] verbose mode shows keystore password in clear text

2014-02-05 Thread Marco Speranza
2014-02-05 Tony Chemit che...@codelutin.com: Can you create the issue for this; I will have a look at it. done: http://jira.codehaus.org/browse/MJARSIGNER-35 thanks a lot -- Marco Speranza marcospera...@apache.org Google Code: http://code.google.com/u/marco.speranza79/

Re: Adding a classpath element within a Mojo

2014-02-05 Thread Igor Fedorenko
Maven first calls #afterProjectsRead(MavenSession), then calculates reactor build order. So session.getProjects() still returns unsorted project list during afterProjectsRead, which most likely does not matter in your case. -- Regards, Igor On 2/4/2014, 17:47, William Ferguson wrote: Can you

Re: [ANN] Apache Maven SCM Publish Plugin 1.0 Released

2014-02-05 Thread sebb
On 4 February 2014 07:23, Hervé Boutemy hbout...@apache.org wrote: The Apache Maven team is pleased to announce the release of the Apache Maven SCM Publish Plugin, version 1.0 It looks as though the plugin now requires Maven 3, whereas 1.0-beta2 did not. Was that change intentional? If so, it

Re: Adding a classpath element within a Mojo

2014-02-05 Thread Igor Fedorenko
What scope do you use for these dependencies? I thought Maven allowed folders for system-scoped dependencies, but I can be wrong. Maybe it is possible to fake this by creating empty jar from the lifecycle participant and then replace it with the real thing during the build. My only other idea is

Re: Plugins with parameters and defaultValue

2014-02-05 Thread Karl Heinz Marbaise
Hi Baptiste, Hi, I think I remember a recent answer from Stephen about plugin conf, saying basically you'd just have to fall back to xpath project/build and then see what's present. First thanks for the hint... Any knowledge where to search for ? Or Stephen ? Do you have a hint ? Does

Re: IOUtil.contentEqualsIgnoreEOL ?

2014-02-05 Thread Baptiste Mathus
Anyone? I suppose I have my answer, I'll leave the current patch as-is :-) 2014-01-28 Baptiste Mathus m...@batmat.net: Hi all, I created ARCHETYPE-456 yesterday for m-archetype-p to support comparing directories for integration-testing ignoring the EOL/newline encoding [1]. Currently, I

Re: Plugins with parameters and defaultValue

2014-02-05 Thread Baptiste Mathus
Here's the thread: http://maven.40175.n5.nabble.com/Maven2-Maven3-plugin-development-Ensuring-only-the-available-parameters-are-allowed-tp5780854p5780948.html Maybe I'd try something along those lines: Plugin plugin = lookupThePluginYouWant(project.getBuildPlugins()); Xpp3Dom config = (Xpp3Dom)

reactorProjects vs. session.getProjects() Was: Re: Adding a classpath element within a Mojo

2014-02-05 Thread Mirko Friedenhagen
Hello, just for my understanding: - Does the property reactorProjects[0] hold the projects in reactor build order? Regards Mirko [0] https://github.com/apache/maven-plugins/blob/trunk/maven-install-plugin/src/main/java/org/apache/maven/plugin/install/InstallMojo.java#L68 On Wed, Feb 5, 2014 at

Re: IOUtil.contentEqualsIgnoreEOL ?

2014-02-05 Thread Barrie Treloar
On 6 February 2014 06:45, Baptiste Mathus m...@batmat.net wrote: Anyone? I suppose I have my answer, I'll leave the current patch as-is :-) Isn't the long term plan to drop anything custom and use existing code? If its already in commons-io just use that instead.

Re: reactorProjects vs. session.getProjects() Was: Re: Adding a classpath element within a Mojo

2014-02-05 Thread Karl Heinz Marbaise
Hi Mirko, just for my understanding: - Does the property reactorProjects[0] hold the projects in reactor build order? Regards Mirko [0] https://github.com/apache/maven-plugins/blob/trunk/maven-install-plugin/src/main/java/org/apache/maven/plugin/install/InstallMojo.java#L68 As far as i

Re: IOUtil.contentEqualsIgnoreEOL ?

2014-02-05 Thread Robert Scholte
How about org.codehaus.plexus.util.StringUtils#unifyLineSeparators(String) ? We're already using plexus-utils, so that saves us another dependency :) Robert Op Wed, 05 Feb 2014 22:07:51 +0100 schreef Barrie Treloar baerr...@gmail.com: On 6 February 2014 06:45, Baptiste Mathus

Re: Adding a classpath element within a Mojo

2014-02-05 Thread William Ferguson
Thanks very much for your help with this Igor. Providing a dummy classes.jar was enough to get everything up and running. But it really does feel like a hack. The hack is going to buy us some time, but I'd like to construct a proper solution (if such a thing exists). Wrt to the ArtifactHandler

Re: reactorProjects vs. session.getProjects() Was: Re: Adding a classpath element within a Mojo

2014-02-05 Thread Jason van Zyl
Yes. On Feb 5, 2014, at 4:05 PM, Mirko Friedenhagen mfriedenha...@gmail.com wrote: Hello, just for my understanding: - Does the property reactorProjects[0] hold the projects in reactor build order? Regards Mirko [0]

Re: Adding a classpath element within a Mojo

2014-02-05 Thread Igor Fedorenko
I don't have all the answers, but I think it is relatively common to have dependency on something available inside an archive deployed to a repository and I am interested to figure out how to express such dependencies in maven. First, however, I need to apologize for my ignorance about Android