> can you not put your password in a property defined in your > ~/.m2/settings.xml file and then reference that property in your scm > config section? Writing passwords into poms is surely always a dirty hack and using the private settings.xml is a good point indeed.
But on a CI server, the CI user usually is accessible by a lot of people. Storing private credentials imho simply doesn't work in this case. Otoh, for shadow password functionality, I fear this won't work since there is no way to restore the original password for sending it to the SCM system. Imho the best way would be to create an own user for the CI system in the SCM which only has readonly access. LieGrue, strub ----- Original Message ---- > From: Stephen Connolly <stephen.alan.conno...@gmail.com> > To: Maven Users List <users@maven.apache.org> > Sent: Friday, August 14, 2009 10:10:32 AM > Subject: Re: SCM plugin password encryption > > can you not put your password in a property defined in your > ~/.m2/settings.xml file and then reference that property in your scm > config section? > > that way you can change the permissions on your ~/.m2/settings.xml > file to make it only readable by yourself (unless you are using > FAT/FAT32 as your filesystem eek!) > > -Stephen > > 2009/8/13 KURT TOMETICH : > > > > I feel like I must be missing something because I have yet found a way to > encrypt my SCM password in my Maven POM. I am using the maven release plugin > and need to use some credentials on the CI server, but I don't want to store > the > password in clear text. Is there a way to encrypt the password and reference > it > in the Maven SCM plugin? > > > > I've tried using the Maven encryption guide > (http://maven.apache.org/guides/mini/guide-encryption.html) which works well > for > encrypting Maven repository credentials. The problem is that you can't (from > what I've seen) reference the id for a server in the Maven SCM plugin. > Here's > an example of what I'd like to see in the POM: > > > > > > org.apache.maven.plugins > > maven-scm-plugin > > > > kurt.tometich > > {encrypted password here} > > > > > > > > > > Any ideas of how to do this would be welcome. Thanks in advance. > > > > Kurt > > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@maven.apache.org > For additional commands, e-mail: users-h...@maven.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
