uima-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marshall Schor <...@schor.com>
Subject Re: Using the Apache Code Signing Service for Eclipse Plugins
Date Mon, 26 Jan 2015 13:22:41 GMT
Also, https://issues.apache.org/jira/browse/INFRA-9024 requesting "API" access -
to allow using an Ant task to do signing.

These issues (9002 and 9024) are now both "resolved".

To actually use this service, you'll need to get signed up, which I can
apparently do, and then also get the credentials (which you need to guard like
your Apache code signing keys).

For signing Eclipse plugins, this will likely take some careful work, maybe
involving breaking apart the multiple steps the eclipse "packing" algorithm is
doing.  I haven't climbed that learning curve yet...


On 1/9/2015 10:43 AM, Marshall Schor wrote:
> https://issues.apache.org/jira/browse/INFRA-9002
> On 1/9/2015 10:40 AM, Marshall Schor wrote:
>> Hi,
>> When users install our Eclipse Plugins, they get a warning message about
>> installing unsigned jars.  This can now be fixed, I think, because Apache has a
>> new jar signing service.
>> https://blogs.apache.org/infra/entry/code_signing_service_now_available
>> Per that post, I'll initiate the process by creating an Infra Jira, to get
>> started, and to get more information.
>> -Marshall

View raw message