incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rahul Akolkar" <rahul.akol...@gmail.com>
Subject Re: Write-up on release signing/verification
Date Thu, 25 Jan 2007 17:05:00 GMT
On 1/25/07, Thilo Goetz <twgoetz@gmx.de> wrote:
> Matthias Wessendorf wrote:
> > here it goes
> >
> > http://people.apache.org/repo/m2-incubating-repository/org/apache/myfaces/trinidadbuild/maven-faces-plugin/incubator-m1-SNAPSHOT/
> >
>
> Hi Matthias,
>
> you certainly have an abundance of signature files there.
> maven-faces-plugin-incubator-m1-SNAPSHOT.jar.asc.asc.md5 seems a little
> excessive, surely?  Or what am I missing here...
>
<snip/>

The gpg plugin does its deed by adding the sig to the list of
artifacts associated with the (maven) module so it can piggyback on
deploys etc., and m2 knows to sum all artifacts it deploys.

So while summing sigs or signing sums is more of a disservice, in this
case, thats the price of automation.

-Rahul


> --Thilo
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message