Details

    • Type: New Project New Project
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Labels:
      None

      Activity

      Hide
      Michael Vorburger added a comment -

      [This is to continue OSSRH-2849 which timed out - may be you could have a Re-Open transition in your JIRA workflow?]

      Hello, sorry for the delay in getting back to you, I've tried preparing a launch4j-maven-plugin-1.5.1-bundle.jar which I'll attached here, but am having trouble with Generating PGP Signatures With Maven as per https://docs.sonatype.org/display/Repository/How+To+Generate+PGP+Signatures+With+Maven, https://oss.sonatype.org/index.html#staging-upload says:

      Staging Signature Validation

      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-linux.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-linux.jar'.
      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1.jar'.
      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-src.zip.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-src.zip'.
      -Missing Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-javadoc.jar.asc' does not exist for 'launch4j-maven-plugin-1.5.1-javadoc.jar'.
      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-mac.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-mac.jar'.
      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-solaris.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-solaris.jar'.
      -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-win32.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-win32.jar'.
      -Missing Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-sources.jar.asc' does not exist for 'launch4j-maven-plugin-1.5.1-sources.jar'.

      I've obtained this launch4j-maven-plugin-1.5.1-bundle.jar from commit 557560b933a41a63bc3561db05bc0ad3951bc521 from git://github.com/vorburger/launch4j-maven-plugin.git (https://github.com/vorburger/launch4j-maven-plugin) by doing 'mvn clean verify source:jar javadoc:jar repository:bundle-create' - can you help with advising what I am doing wrong? Can you drop the requirement to have it signed?

      Show
      Michael Vorburger added a comment - [This is to continue OSSRH-2849 which timed out - may be you could have a Re-Open transition in your JIRA workflow?] Hello, sorry for the delay in getting back to you, I've tried preparing a launch4j-maven-plugin-1.5.1-bundle.jar which I'll attached here, but am having trouble with Generating PGP Signatures With Maven as per https://docs.sonatype.org/display/Repository/How+To+Generate+PGP+Signatures+With+Maven , https://oss.sonatype.org/index.html#staging-upload says: Staging Signature Validation -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-linux.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-linux.jar'. -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1.jar'. -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-src.zip.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-src.zip'. -Missing Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-javadoc.jar.asc' does not exist for 'launch4j-maven-plugin-1.5.1-javadoc.jar'. -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-mac.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-mac.jar'. -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-solaris.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-solaris.jar'. -Invalid Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-workdir-win32.jar.asc' is not a valid signature for 'launch4j-maven-plugin-1.5.1-workdir-win32.jar'. -Missing Signature: '/com/akathist/maven/plugins/launch4j/launch4j-maven-plugin/1.5.1/launch4j-maven-plugin-1.5.1-sources.jar.asc' does not exist for 'launch4j-maven-plugin-1.5.1-sources.jar'. I've obtained this launch4j-maven-plugin-1.5.1-bundle.jar from commit 557560b933a41a63bc3561db05bc0ad3951bc521 from git://github.com/vorburger/launch4j-maven-plugin.git ( https://github.com/vorburger/launch4j-maven-plugin ) by doing 'mvn clean verify source:jar javadoc:jar repository:bundle-create' - can you help with advising what I am doing wrong? Can you drop the requirement to have it signed?
      Hide
      Juven Xu added a comment -

      first you need to make your bundle contains something which format follows:
      https://docs.sonatype.org/display/Repository/Uploading+3rd-party+Artifacts+to+The+Central+Repository#Uploading3rd-partyArtifactstoTheCentralRepository-BundleFormat
      this means you don't have to use the repository:bundle-create, you can always manually create sources.jar, javadoc.jar and then sign all them.

      regarding pgp signature validation failure, I can reproduce at my side as well:

      [juven@sonatype-ossrh01 tmp]$ gpg --verify launch4j-maven-plugin-1.5.1.jar.asc
      gpg: Signature made Fri 24 Feb 2012 01:47:29 AM CST using RSA key ID 7F15E52F
      gpg: BAD signature from "Michael Vorburger <mike@vorburger.ch>"
      

      Did you sign your files (within the bundle) with command gpg -ab launch4j-maven-plugin-1.5.1.jar?

      thanks,
      Juven

      Show
      Juven Xu added a comment - first you need to make your bundle contains something which format follows: https://docs.sonatype.org/display/Repository/Uploading+3rd-party+Artifacts+to+The+Central+Repository#Uploading3rd-partyArtifactstoTheCentralRepository-BundleFormat this means you don't have to use the repository:bundle-create, you can always manually create sources.jar, javadoc.jar and then sign all them. regarding pgp signature validation failure, I can reproduce at my side as well: [juven@sonatype-ossrh01 tmp]$ gpg --verify launch4j-maven-plugin-1.5.1.jar.asc gpg: Signature made Fri 24 Feb 2012 01:47:29 AM CST using RSA key ID 7F15E52F gpg: BAD signature from "Michael Vorburger <mike@vorburger.ch>" Did you sign your files (within the bundle) with command gpg -ab launch4j-maven-plugin-1.5.1.jar ? thanks, Juven
      Hide
      Michael Vorburger added a comment -

      Hopefully this (attached) better? Also went through on https://oss.sonatype.org/content/repositories/central_bundles-233/ now. Apologies for the confusion.

      Show
      Michael Vorburger added a comment - Hopefully this (attached) better? Also went through on https://oss.sonatype.org/content/repositories/central_bundles-233/ now. Apologies for the confusion.
      Hide
      Juven Xu added a comment -

      staging repository promoted, will be synced to central in 1 hour.

      Show
      Juven Xu added a comment - staging repository promoted, will be synced to central in 1 hour.

        People

        • Assignee:
          Juven Xu
          Reporter:
          Michael Vorburger
        • Votes:
          0 Vote for this issue
          Watchers:
          0 Start watching this issue

          Dates

          • Created:
            Updated:
            Resolved: