Maven Upload Requests
  1. Maven Upload Requests
  2. MAVENUPLOAD-2479

Official Bouncy Castle maven repository for syncing against.

    Details

    • Type: Wish Wish
    • Status: Closed Closed
    • Resolution: Fixed
    • Labels:
      None

      Description


      Hi, we've had a lot of requests for this over the last few months, have just gotten around to doing it. The initial repository just has a few provider jars for the latest version in it, once I have confirmed that everything is in the right format and we're syncing okay I'll start publishing the other artifacts.

      If there are any errors please let me know. I'm a bit of a maven novice, so apologies in advance if there are.

      Standard info below:

      "org.bouncycastle","bcmavensync@access.bouncycastle.org:/home/users/bcmavensync/maven/maven2","rsync_ssh","David Hook","dgh@bouncycastle.org",,

        Issue Links

          Activity

          Jörg Schaible made changes -
          Field Original Value New Value
          Link This issue supercedes MAVENUPLOAD-2477 [ MAVENUPLOAD-2477 ]
          Hide
          brianfox brianfox added a comment -
          Please sign the artifacts with gpg --detach-sign, or use the maven-gpg-plugin.

          Also, is it true that these jars really have no dependencies?
          Show
          brianfox brianfox added a comment - Please sign the artifacts with gpg --detach-sign, or use the maven-gpg-plugin. Also, is it true that these jars really have no dependencies?
          brianfox brianfox made changes -
          Assignee Brian Fox [ brianfox ]
          Hide
          brianfox brianfox added a comment -
          The rest of the setup appears ok as I can rsync the contents from central. Once the sigs are present, we can flip on the sync.
          Show
          brianfox brianfox added a comment - The rest of the setup appears ok as I can rsync the contents from central. Once the sigs are present, we can flip on the sync.
          Hide
          David Hook added a comment -
          Yes, the provider jars have no dependencies, you could say it goes with the turf... The other BC jars do have dependencies. I've added the mail jars for 1.5 and 1.4 as an example. I'm assuming that only mandatory dependencies are required (see description in POM for example).

          With the --detach-sign, I'm guessing you mean I should set up a BC PGP key and generate detached signatures with those. Is that correct?

          Is there somewhere I should register the public key?

          Thanks,

          David
          Show
          David Hook added a comment - Yes, the provider jars have no dependencies, you could say it goes with the turf... The other BC jars do have dependencies. I've added the mail jars for 1.5 and 1.4 as an example. I'm assuming that only mandatory dependencies are required (see description in POM for example). With the --detach-sign, I'm guessing you mean I should set up a BC PGP key and generate detached signatures with those. Is that correct? Is there somewhere I should register the public key? Thanks, David
          Hide
          David Hook added a comment -
          Okay, I think I've managed to answer my question.

          I've attached an armoured GPG public key in a jar file that has been signed with the BC code signing key.

          Signing Key ID is B341DDB020FCB6AB

          I've generated detached signatures for the jar files and the poms.

          Let me know if I need to do anything else.

          Thanks,

          David
          Show
          David Hook added a comment - Okay, I think I've managed to answer my question. I've attached an armoured GPG public key in a jar file that has been signed with the BC code signing key. Signing Key ID is B341DDB020FCB6AB I've generated detached signatures for the jar files and the poms. Let me know if I need to do anything else. Thanks, David
          David Hook made changes -
          Attachment bckey.jar [ 42535 ]
          David Hook made changes -
          Link This issue supercedes MAVENUPLOAD-2437 [ MAVENUPLOAD-2437 ]
          Carlos Sanchez made changes -
          Assignee Brian Fox [ brianfox ] Carlos Sanchez [ carlos ]
          Resolution Fixed [ 1 ]
          Status Open [ 1 ] Closed [ 6 ]

            People

            • Assignee:
              Carlos Sanchez
              Reporter:
              David Hook
            • Votes:
              4 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: