maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Karl Heinz Marbaise (JIRA)" <j...@apache.org>
Subject [jira] [Closed] (MPOM-118) Enforce strong GPG signatures by default
Date Sat, 09 Jul 2016 12:23:11 GMT

     [ https://issues.apache.org/jira/browse/MPOM-118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Karl Heinz Marbaise closed MPOM-118.
------------------------------------
    Resolution: Fixed
      Assignee: Hervé Boutemy

Done by Hervé in [r1745383|http://svn.apache.org/r1745383]

> Enforce strong GPG signatures by default
> ----------------------------------------
>
>                 Key: MPOM-118
>                 URL: https://issues.apache.org/jira/browse/MPOM-118
>             Project: Maven POMs
>          Issue Type: Improvement
>          Components: asf
>    Affects Versions: ASF-17
>            Reporter: Christopher Tubbs
>            Assignee: Hervé Boutemy
>             Fix For: ASF-19
>
>
> maven-gpg-plugin configuration could be improved a bit so that ASF releases are not weakened
by a user's weak personal configuration.
> I suggest adding something like the following to maven-gpg-plugin's configuration in
the pluginManagement section:
> {code:xml}
> <gpgArguments combine.children="append">
>   <arg>--digest-algo=SHA512</arg>
> </gpgArguments>
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message