Accessing a pgp signature file from plugin

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Accessing a pgp signature file from plugin

Slawomir Jaranowski
Hi,

I'm author of pgpverify-maven-plugin, this plugin check pgp signatures of
project dependencies.

I have problem how to access/download "asc" signature file from mojo.

Currently I use repositorySystem.resolve(...), for artifact with changed
file name, but in logs I see, eg:

Could not validate integrity of download from
  https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-ejb-plugin/3.0.1/maven-ejb-plugin-3.0.1.jar.asc:
  Checksum validation failed, no checksums available

My problem code are here:
https://github.com/s4u/pgpverify-maven-plugin/blob/master/src/main/java/org/simplify4u/plugins/ArtifactResolver.java#L111
https://github.com/s4u/pgpverify-maven-plugin/blob/master/src/main/java/org/simplify4u/plugins/AscArtifactHandler.java#L56


--
SÅ‚awomir Jaranowski