geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Genender <jgenen...@apache.org>
Subject Re: Tomcat m2 repo?
Date Tue, 27 Mar 2007 15:18:52 GMT
Why do they need pgp signatures? That is new to me.

Do you mean SHA1 signatures?

For SHA1 sigs, they can use the sha1 program on minotaur.

They would need to do something like:

sha1 -q ./tomcat-whatever.jar > ./timcat-whatever.jar.sha1
sha1 -q ./tomcat-whatever.pom > ./timcat-whatever.pom.sha1

Jeff


Paul McMahan wrote:
> A few months ago I opened a tomcat issue requesting them to publish
> the tomcat jars to a maven repo.
> http://issues.apache.org/bugzilla/show_bug.cgi?id=41093
> 
> Yesterday they marked the issue as resolved since the tomcat jars are
> now available at http://tomcat.apache.org/dev/dist/m2-repository, but
> commented that they would publish to central if there is a way to work
> around a problem with PGP signatures:
> 
>>  Doesn't seem like I can publish to the central repo
>>  because it requires PGP  signatures and maven
>>  doesn't let you do that with single JAR if you're not
>>  building with Maven.
>>
>>  If you have a way to get the PGP info in there in
>>  the way we are doing it now,  let us know and
>> open a new bug.
> 
> If anyone knows of a way to sign single JARs not built with maven then
> please enlighten us or just go ahead open a new tomcat bug with the
> details.  This may be the only remaining impediment towards making the
> tomcat jars available on central.
> 
> Best wishes,
> Paul
> 
> 
> On 2/13/07, Jason Dillon <jason@planet57.com> wrote:
>> Okay, hopefully they will get the kinks out soon ;-)
>>
>> --jason
>>
>>
>> On Feb 13, 2007, at 4:39 PM, Paul McMahan wrote:
>>
>> > Tomcat currently builds with ant and then manually publish their jars
>> > to a repo at tomcat.apache.org.    See
>> > http://www.nabble.com/Tomcat-Jars---Maven2-repo-
>> > tf3023226.html#a8397986
>> > They have only just started to make publishing to an m2 repo part of
>> > their release process, and IIUC they want to work the kinks out of
>> > their scripts before pointing them at central.
>> >
>> > Best wishes,
>> > Paul
>> >
>> > On 2/13/07, Jason Dillon <jason@planet57.com> wrote:
>> >> Why do we need this repo:
>> >>
>> >>      http://tomcat.apache.org/dev/dist/m2-repository
>> >>
>> >> Is Tomcat not publishing to central?  If not... anyone know why?
>> >>
>> >> --jason
>> >>
>>
>>

Mime
View raw message