www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From reposit...@apache.org
Subject [ASF Repository Project Wiki] Updated: BrettPorter
Date Sun, 23 Jan 2005 05:04:30 GMT
   Date: 2005-01-22T21:04:30
   Editor: BrettPorter
   Wiki: ASF Repository Project Wiki
   Page: BrettPorter
   URL: http://wiki.apache.org/ASFRepository/BrettPorter

   no comment

Change Log:

------------------------------------------------------------------------------
@@ -39,8 +39,16 @@
 == Required new features ==
 
 These are features required in Maven Wagon to support the repository:
- * sign code before pushing it up (using GnuPG), and handle this in the downloading also.
More details to be added.
- * possibly use JAR signing (this is built into Java, but not other languages, so is only
a bonus feature. more thought needed)
+ * sign code before pushing it up (using GnuPG)
+   * handle this in the downloading also. 
+   * it can be at the users discretion: skip it, check it from the same location, check it,
getting keys from a specified trusted location, only trust if the key is already in my keychain
are probably the levels.
+   * More details to be added.
+ * possibly use JAR signing
+   * this is built into Java, but not other languages, so is only a bonus feature. 
+   * can be used inside secure classloaders, and only requires one GET as it is self contained
+   * may require sealing, which causes other issues
+   * requires a CA: might be beyond average joe, but Apache would have one?
+   * more thought needed
  * publish to a stage location so it can be vetted by a script for a valid md5, asc and that
it isn't a SNAPSHOT, before copying it to the release location
  * allow different repository formats, to support a possible difference between ASFRepository,
Maven-1 and Maven-2
  * license handling: 

Mime
View raw message