Mailing-List: contact repository-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: repository@apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <48B24EB2.4000001@apache.org>
Date: Mon, 25 Aug 2008 01:18:26 -0500
From: Filip at Apache <fhanik@apache.org>
Reply-To: fhanik@apache.org
User-Agent: Thunderbird 2.0.0.16 (Windows/20080708)
MIME-Version: 1.0
To: Wendy Smoak <wsmoak@gmail.com>
CC: repository@apache.org
Subject: Re: missing pgp sigs in maven repo
References: <alpine.LRH.1.10.0808242337130.27202@west.cs.uu.nl>
	 <48B2167D.4020109@apache.org>
 <adba96190808242113y3989be1xc70184c32fa747ad@mail.gmail.com>
In-Reply-To: <adba96190808242113y3989be1xc70184c32fa747ad@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

we use this ANT script

http://svn.apache.org/viewvc/tomcat/trunk/res/maven/mvn-pub.xml?view=markup

and that executes the deploy:deploy-file target, but I'm no Maven whiz

Filip

Wendy Smoak wrote:
> On Sun, Aug 24, 2008 at 7:18 PM, Filip at Apache <fhanik@apache.org> wrote:
>   
>> hi Henk, our upload process hasn't changed for a very long time. Signatures
>> have never been uploaded for the missing files in previous releases, and I
>> got an email saying they werent required for those files.
>>     
>
> Signatures are required for everything we release, we just haven't
> always been thorough about checking for them.  It looks like you've
> got signatures for the jars, and just need to sign the poms as well.
>
> I remember working with you on getting Tomcat artifacts into the repo,
> and in fact we added a feature to the GPG plugin so it would work with
> mvn deploy:deploy-file.  I lost track of how you eventually ended up
> deploying things though.
>
> Can you point us at the process you're using?  It shouldn't be too hard to fix.
>
> Thanks,
>