s4u / sign-maven-plugin Goto Github PK

View Code? Open in Web Editor NEW

43.0 7.0 7.0 955 KB

Maven plugin which creates Open PGP / GPG signatures for all of the project's artifacts

Home Page: https://www.simplify4u.org/sign-maven-plugin/

License: Apache License 2.0

Groovy 10.41% Java 89.59%

maven maven-plugin pgp-signature java hacktoberfest

sign-maven-plugin's People

Contributors

Stargazers

Watchers

Forkers

mkarg cybernetics andrebrait mccartney 123haynes cstamas

sign-maven-plugin's Issues

[TODO] Undo workaround for MSHARED-969 and MINVOKER-273

In PR #16 we introduced the workaround .filter(s -> !"null".equals(s)); for MSHARED-969 and MINVOKER-273. As soon as those issues have been resolved and their solution is published on Maven Central, we should replace the workaround by a dependency upgrade.

EdDSA KeyFactory not available

Describe the bug
Using the plugin to sing a jar throws the exception: org.bouncycastle.openpgp.PGPException: Exception constructing key: EdDSA KeyFactory not available

To Reproduce

Executing maven clean install with the following plugin configuration

                 <plugin>
                    <groupId>org.simplify4u.plugins</groupId>
                    <artifactId>sign-maven-plugin</artifactId>
                    <version>1.0.0</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>sign</goal>
                            </goals>
                            <configuration>
                                <keyFile><!-- Value here --></keyFile>
                                <keyId><!-- Value here --></keyId>
                                <keyPass><!-- Value here --></keyPass>
                            </configuration>
                        </execution>                            
                    </executions>
                </plugin>

Expected behavior
Sign the jar

Additional context
OS: Windows 10
JDK: Oracle 1.8

Signature file name should contain version

currently signature file don't have version in name, eg we have:

target/artifactName-Version.jar
target/artifactName.jar.asc

should be:

target/artifactName-Version.jar
target/artifactName-Version.jar.asc

It doesn't has impact on result because proper artifact is attached

Environment variables and POM configuration don't work

Describe the bug

The documentation states that there is 3 ways to pass the required parameters:

POM configuration
Command line arguments
Environment variables

But only the command line arguments is working.

As this is a really big issue, maybe I did something wrong.

To Reproduce

I followed the tutorial https://www.simplify4u.org/sign-maven-plugin/key-prepare.html to create and export a key.

using POM configuration :

% cat pom.xml

<?xml version="1.0" encoding="UTF-8"?>

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">

  <modelVersion>4.0.0</modelVersion>

  ...

  <build>

      <plugins>
        <plugin>
          <groupId>org.simplify4u.plugins</groupId>
          <artifactId>sign-maven-plugin</artifactId>
          <version>0.3.1</version>
          <executions>
            <execution>
              <goals>
                <goal>sign</goal>
              </goals>
              <configuration>
                <keyId>9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D</keyId>
                <keyPass>test</keyPass>
                <keyFile>~/.m2/sign-key.ascxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</keyFile>
              </configuration>
            </execution>
          </executions>
        </plugin>
      </plugins>

  </build>

</project>


% mvn sign:sign -X

Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG]   Imported: javax.annotation.* < plexus.core
[DEBUG]   Imported: javax.annotation.security.* < plexus.core
[DEBUG]   Imported: javax.enterprise.inject.* < plexus.core
[DEBUG]   Imported: javax.enterprise.util.* < plexus.core
[DEBUG]   Imported: javax.inject.* < plexus.core
[DEBUG]   Imported: org.apache.maven.* < plexus.core
[DEBUG]   Imported: org.apache.maven.artifact < plexus.core
[DEBUG]   Imported: org.apache.maven.classrealm < plexus.core
[DEBUG]   Imported: org.apache.maven.cli < plexus.core
[DEBUG]   Imported: org.apache.maven.configuration < plexus.core
[DEBUG]   Imported: org.apache.maven.exception < plexus.core
[DEBUG]   Imported: org.apache.maven.execution < plexus.core
[DEBUG]   Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG]   Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG]   Imported: org.apache.maven.model < plexus.core
[DEBUG]   Imported: org.apache.maven.monitor < plexus.core
[DEBUG]   Imported: org.apache.maven.plugin < plexus.core
[DEBUG]   Imported: org.apache.maven.profiles < plexus.core
[DEBUG]   Imported: org.apache.maven.project < plexus.core
[DEBUG]   Imported: org.apache.maven.reporting < plexus.core
[DEBUG]   Imported: org.apache.maven.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG]   Imported: org.apache.maven.settings < plexus.core
[DEBUG]   Imported: org.apache.maven.toolchain < plexus.core
[DEBUG]   Imported: org.apache.maven.usability < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG]   Imported: org.codehaus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.* < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.component < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.container < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.context < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.* < plexus.core
[DEBUG]   Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG]   Imported: org.eclipse.aether.collection < plexus.core
[DEBUG]   Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG]   Imported: org.eclipse.aether.graph < plexus.core
[DEBUG]   Imported: org.eclipse.aether.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.installation < plexus.core
[DEBUG]   Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG]   Imported: org.eclipse.aether.repository < plexus.core
[DEBUG]   Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG]   Imported: org.eclipse.aether.spi < plexus.core
[DEBUG]   Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.version < plexus.core
[DEBUG]   Imported: org.fusesource.jansi.* < plexus.core
[DEBUG]   Imported: org.slf4j.* < plexus.core
[DEBUG]   Imported: org.slf4j.event.* < plexus.core
[DEBUG]   Imported: org.slf4j.helpers.* < plexus.core
[DEBUG]   Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks:   [sign:sign]
[DEBUG] Style:   Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project:       name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins)     : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal:          org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style:         Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
  <keyId>${sign.keyId}</keyId>
  <keyPass>${sign.keyPass}</keyPass>
  <skip default-value="false">${sign.skip}</skip>
  <skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=583479, ConflictMarker.markTime=149590, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=383584, ConflictIdSorter.topsortTime=344586, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3875513, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=168430460, DefaultDependencyCollector.transformTime=6670117}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]    org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG]          org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG]             org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]       org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG]       org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG]       org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG]          commons-io:commons-io:jar:2.5:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG]          javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG]             javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG]       com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG]          aopalliance:aopalliance:jar:1.0:compile
[DEBUG]          com.google.guava:guava:jar:25.1-android:compile
[DEBUG]             com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG]             org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG]             com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG]             com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG]             org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG]       javax.inject:javax.inject:jar:1:compile
[DEBUG]       org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG]       org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG]       org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG]    org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG]    org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG]       org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG]    io.vavr:vavr:jar:0.10.3:compile
[DEBUG]       io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG]    org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Imported:  < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG]   Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG]   Included: commons-io:commons-io:jar:2.5
[DEBUG]   Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG]   Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG]   Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG]   Included: aopalliance:aopalliance:jar:1.0
[DEBUG]   Included: com.google.guava:guava:jar:25.1-android
[DEBUG]   Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG]   Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG]   Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG]   Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG]   Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG]   Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG]   Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG]   Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG]   Included: io.vavr:vavr:jar:0.10.3
[DEBUG]   Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG]   (f) keyFile = /home/someuser/.m2/sign-key.asc
[DEBUG]   (f) skip = false
[DEBUG]   (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.512 s
[INFO] Finished at: 2021-09-22T18:13:35+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:148)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.simplify4u.plugins.sign.openpgp.PGPSignerException: Secret key is encrypted - keyPass is required
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:130)
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:80)
    at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
    at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
    at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:151)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
[ERROR]
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException

using command line arguments

% mvn sign:sign -X -Dsign.keyFile=~/.m2/sign-key.asc -Dsign.keyId=9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D -Dsign.keyPass=test

Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG]   Imported: javax.annotation.* < plexus.core
[DEBUG]   Imported: javax.annotation.security.* < plexus.core
[DEBUG]   Imported: javax.enterprise.inject.* < plexus.core
[DEBUG]   Imported: javax.enterprise.util.* < plexus.core
[DEBUG]   Imported: javax.inject.* < plexus.core
[DEBUG]   Imported: org.apache.maven.* < plexus.core
[DEBUG]   Imported: org.apache.maven.artifact < plexus.core
[DEBUG]   Imported: org.apache.maven.classrealm < plexus.core
[DEBUG]   Imported: org.apache.maven.cli < plexus.core
[DEBUG]   Imported: org.apache.maven.configuration < plexus.core
[DEBUG]   Imported: org.apache.maven.exception < plexus.core
[DEBUG]   Imported: org.apache.maven.execution < plexus.core
[DEBUG]   Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG]   Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG]   Imported: org.apache.maven.model < plexus.core
[DEBUG]   Imported: org.apache.maven.monitor < plexus.core
[DEBUG]   Imported: org.apache.maven.plugin < plexus.core
[DEBUG]   Imported: org.apache.maven.profiles < plexus.core
[DEBUG]   Imported: org.apache.maven.project < plexus.core
[DEBUG]   Imported: org.apache.maven.reporting < plexus.core
[DEBUG]   Imported: org.apache.maven.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG]   Imported: org.apache.maven.settings < plexus.core
[DEBUG]   Imported: org.apache.maven.toolchain < plexus.core
[DEBUG]   Imported: org.apache.maven.usability < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG]   Imported: org.codehaus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.* < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.component < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.container < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.context < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.* < plexus.core
[DEBUG]   Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG]   Imported: org.eclipse.aether.collection < plexus.core
[DEBUG]   Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG]   Imported: org.eclipse.aether.graph < plexus.core
[DEBUG]   Imported: org.eclipse.aether.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.installation < plexus.core
[DEBUG]   Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG]   Imported: org.eclipse.aether.repository < plexus.core
[DEBUG]   Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG]   Imported: org.eclipse.aether.spi < plexus.core
[DEBUG]   Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.version < plexus.core
[DEBUG]   Imported: org.fusesource.jansi.* < plexus.core
[DEBUG]   Imported: org.slf4j.* < plexus.core
[DEBUG]   Imported: org.slf4j.event.* < plexus.core
[DEBUG]   Imported: org.slf4j.helpers.* < plexus.core
[DEBUG]   Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks:   [sign:sign]
[DEBUG] Style:   Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project:       name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins)     : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal:          org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style:         Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
  <keyId>${sign.keyId}</keyId>
  <keyPass>${sign.keyPass}</keyPass>
  <skip default-value="false">${sign.skip}</skip>
  <skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=424721, ConflictMarker.markTime=126989, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=255057, ConflictIdSorter.topsortTime=168119, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3823859, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=158085101, DefaultDependencyCollector.transformTime=5704309}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]    org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG]          org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG]             org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]       org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG]       org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG]       org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG]          commons-io:commons-io:jar:2.5:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG]          javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG]             javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG]       com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG]          aopalliance:aopalliance:jar:1.0:compile
[DEBUG]          com.google.guava:guava:jar:25.1-android:compile
[DEBUG]             com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG]             org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG]             com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG]             com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG]             org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG]       javax.inject:javax.inject:jar:1:compile
[DEBUG]       org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG]       org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG]       org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG]    org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG]    org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG]       org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG]    io.vavr:vavr:jar:0.10.3:compile
[DEBUG]       io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG]    org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Imported:  < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG]   Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG]   Included: commons-io:commons-io:jar:2.5
[DEBUG]   Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG]   Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG]   Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG]   Included: aopalliance:aopalliance:jar:1.0
[DEBUG]   Included: com.google.guava:guava:jar:25.1-android
[DEBUG]   Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG]   Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG]   Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG]   Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG]   Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG]   Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG]   Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG]   Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG]   Included: io.vavr:vavr:jar:0.10.3
[DEBUG]   Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG]   (f) keyFile = /home/someuser/Projets/Personnel/Java/ndd-maven-parent/~/.m2/sign-key.asc
[DEBUG]   (f) keyId = 9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D
[DEBUG]   (f) keyPass = test
[DEBUG]   (f) skip = false
[DEBUG]   (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] Sign - key not found - skip execution
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.494 s
[INFO] Finished at: 2021-09-22T18:13:50+02:00
[INFO] ------------------------------------------------------------------------

using environment variables

%  SIGN_KEY=~/.m2/sign-key.asc SIGN_KEY_ID=9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D SIGN_KEY_PASS=test mvn sign:sign -X

Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG]   Imported: javax.annotation.* < plexus.core
[DEBUG]   Imported: javax.annotation.security.* < plexus.core
[DEBUG]   Imported: javax.enterprise.inject.* < plexus.core
[DEBUG]   Imported: javax.enterprise.util.* < plexus.core
[DEBUG]   Imported: javax.inject.* < plexus.core
[DEBUG]   Imported: org.apache.maven.* < plexus.core
[DEBUG]   Imported: org.apache.maven.artifact < plexus.core
[DEBUG]   Imported: org.apache.maven.classrealm < plexus.core
[DEBUG]   Imported: org.apache.maven.cli < plexus.core
[DEBUG]   Imported: org.apache.maven.configuration < plexus.core
[DEBUG]   Imported: org.apache.maven.exception < plexus.core
[DEBUG]   Imported: org.apache.maven.execution < plexus.core
[DEBUG]   Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG]   Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG]   Imported: org.apache.maven.model < plexus.core
[DEBUG]   Imported: org.apache.maven.monitor < plexus.core
[DEBUG]   Imported: org.apache.maven.plugin < plexus.core
[DEBUG]   Imported: org.apache.maven.profiles < plexus.core
[DEBUG]   Imported: org.apache.maven.project < plexus.core
[DEBUG]   Imported: org.apache.maven.reporting < plexus.core
[DEBUG]   Imported: org.apache.maven.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG]   Imported: org.apache.maven.settings < plexus.core
[DEBUG]   Imported: org.apache.maven.toolchain < plexus.core
[DEBUG]   Imported: org.apache.maven.usability < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG]   Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG]   Imported: org.codehaus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.* < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.component < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.container < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.context < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG]   Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.* < plexus.core
[DEBUG]   Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG]   Imported: org.eclipse.aether.collection < plexus.core
[DEBUG]   Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG]   Imported: org.eclipse.aether.graph < plexus.core
[DEBUG]   Imported: org.eclipse.aether.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.installation < plexus.core
[DEBUG]   Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG]   Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG]   Imported: org.eclipse.aether.repository < plexus.core
[DEBUG]   Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG]   Imported: org.eclipse.aether.spi < plexus.core
[DEBUG]   Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG]   Imported: org.eclipse.aether.version < plexus.core
[DEBUG]   Imported: org.fusesource.jansi.* < plexus.core
[DEBUG]   Imported: org.slf4j.* < plexus.core
[DEBUG]   Imported: org.slf4j.event.* < plexus.core
[DEBUG]   Imported: org.slf4j.helpers.* < plexus.core
[DEBUG]   Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks:   [sign:sign]
[DEBUG] Style:   Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project:       name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins)     : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal:          org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style:         Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
  <keyId>${sign.keyId}</keyId>
  <keyPass>${sign.keyPass}</keyPass>
  <skip default-value="false">${sign.skip}</skip>
  <skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=477597, ConflictMarker.markTime=135184, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=240373, ConflictIdSorter.topsortTime=169962, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3510919, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=159820128, DefaultDependencyCollector.transformTime=5423694}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]    org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG]          org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG]             org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]       org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG]       org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG]       org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG]       org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG]       org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG]          commons-io:commons-io:jar:2.5:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG]          javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG]             javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG]       org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG]       com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG]          aopalliance:aopalliance:jar:1.0:compile
[DEBUG]          com.google.guava:guava:jar:25.1-android:compile
[DEBUG]             com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG]             org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG]             com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG]             com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG]             org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG]       javax.inject:javax.inject:jar:1:compile
[DEBUG]       org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG]       org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG]       org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG]       org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG]    org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG]    org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG]       org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG]    io.vavr:vavr:jar:0.10.3:compile
[DEBUG]       io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG]    org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Imported:  < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG]   Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG]   Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG]   Included: commons-io:commons-io:jar:2.5
[DEBUG]   Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG]   Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG]   Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG]   Included: aopalliance:aopalliance:jar:1.0
[DEBUG]   Included: com.google.guava:guava:jar:25.1-android
[DEBUG]   Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG]   Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG]   Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG]   Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG]   Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG]   Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG]   Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG]   Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG]   Included: io.vavr:vavr:jar:0.10.3
[DEBUG]   Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG]   (f) keyFile = /home/someuser/.m2/sign-key.asc
[DEBUG]   (f) skip = false
[DEBUG]   (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  0.483 s
[INFO] Finished at: 2021-09-22T18:15:11+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:148)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.simplify4u.plugins.sign.openpgp.PGPSignerException: Secret key not found
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.lambda$loadKey$2 (PGPSigner.java:121)
    at java.util.Optional.orElseThrow (Optional.java:403)
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:121)
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:80)
    at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
    at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
    at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:151)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke (Method.java:567)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
[ERROR]
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException

Using:

% mvn -v

Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"

Expected behavior

Environment variables and POM configuration should work.

Key configuration source in debug level

Keys configuration params:

keyId
keyPass
keyFile

can be provided by maven configuration or by environment.

In order to help in investigation problems with configuration we should log in debug level source of params maven or environment variables.

pass and private key must be masked and only first and last significant characters should be logged.

PGPException: checksum mismatch at in checksum of 20 bytes

Describe the bug
Cannot sing artifacts, the plugin says

Caused by: org.bouncycastle.openpgp.PGPException: checksum mismatch at in checksum of 20 bytes
    at org.bouncycastle.openpgp.PGPSecretKey.extractKeyData (Unknown Source)
    at org.bouncycastle.openpgp.PGPSecretKey.extractPrivateKey (Unknown Source)
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:140)
    at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:81)
    at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
    at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
    at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:206)

To Reproduce
I have prepared key following by Private key preparation:

Made new key with gpg --full-gen-key
Checked a result with gpg --list-secret-keys --keyid-format long
Then exported the private key with 'gpg --armor --export-secret-keys my-private-key-id! > ~/.m2/sign-key.asc`
And finally I ran a build with `mvn clean verify -Prelease -Dsign.keyPass=passphrase

Also I have tried to use an encrypted passphrase but had same result

mvn -Prelease -Dsign.keyPass=encrypted-passphrase= -Dsettings.security=~/.m2/settings-security.xml

Expected behavior
Artifacts are signed.

Additional context
My plugin configuration:

    <profile>
      <id>release</id>
      <build>
        <plugins>
          <plugin>
            <groupId>org.simplify4u.plugins</groupId>
            <artifactId>sign-maven-plugin</artifactId>
            <version>1.0.1</version>
            <executions>
              <execution>
                <goals>
                  <goal>sign</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
        </plugins>
      </build>
    </profile>

Dedicated goal to check public key used for signing the attached *.asc files properly uploaded to public keyserver

As Sonatype requires each Maven artifact having the public key used for signing artifacts uploaded to some public keyserver (https://central.sonatype.org/publish/requirements/gpg/#distributing-your-public-key) it would be nice to check this requirement during the release of the project with a dedicated Maven plugin goal.
Not sure whether this goal would make more sense in this plugin or rather https://www.simplify4u.org/sign-maven-plugin/

Support tilde `~` in key file path

Add suport tilde ~ in key file path.

If keyFile begin with tilde followed by / slash or \ backslash depends on os, like

~/path-to-key.asc

should be replace by

${user.home}/path-to-key.asc

In class PGPKeyInfo we need to change method keyFromFile and confirm by unit tests

Allow maven encryption for keyPass

Maven allow encrypt passwords https://maven.apache.org/guides/mini/guide-encryption.html

We should have possibility to provide encrypted version of key password using Maven mechanizm.

For this issue we will create IT test to verify in real execution.

Validate key expiration time

Key expiration time should be checked and when key expire signing should fail.

[TODO] Review secret key expiration check

There are questions open wrt to how we currently perform the expiration check for the secret key, see bcgit/bc-java#861. Once this issue is resolved, we possibly need to revise our existing solution.

Plugin no longer compatible with Maven 4 (alpha-12)

Describe the bug
mvn -v

Apache Maven 4.0.0-alpha-12 (e627879aedd8a0c1859e58a527852ae8de1b4878)
Maven home: /Users/lprimak/.sdkman/candidates/maven/current
Java version: 21.0.2, vendor: Azul Systems, Inc., runtime: /Users/lprimak/.sdkman/candidates/java/21.0.2.fx-zulu/zulu-21.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "12.7.3", arch: "x86_64", family: "mac"

Log:

[INFO] BUILD FAILURE
[INFO] --------------------------------------------------------------------------------------------------------------------------
[INFO] Total time:  1.401 s
[INFO] Finished at: 2024-02-13T18:52:48-06:00
[INFO] --------------------------------------------------------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign (default-cli) on project base-pom: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign failed: An API incompatibility was encountered while executing org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign: java.lang.NoSuchMethodError: 'org.eclipse.aether.transform.FileTransformerManager org.eclipse.aether.RepositorySystemSession.getFileTransformerManager()'
[ERROR] -----------------------------------------------------
[ERROR] realm =    plugin>org.simplify4u.plugins:sign-maven-plugin:1.0.1
[ERROR] strategy = org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy
[ERROR] urls[0] = file:/Users/lprimak/.m2/repository/org/simplify4u/plugins/sign-maven-plugin/1.0.1/sign-maven-plugin-1.0.1.jar
[ERROR] urls[1] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar
[ERROR] urls[2] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-utils/3.4.1/plexus-utils-3.4.1.jar
[ERROR] urls[3] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar
[ERROR] urls[4] = file:/Users/lprimak/.m2/repository/org/bouncycastle/bcpg-jdk15on/1.70/bcpg-jdk15on-1.70.jar
[ERROR] urls[5] = file:/Users/lprimak/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.70/bcprov-jdk15on-1.70.jar
[ERROR] urls[6] = file:/Users/lprimak/.m2/repository/io/vavr/vavr/0.10.4/vavr-0.10.4.jar
[ERROR] urls[7] = file:/Users/lprimak/.m2/repository/io/vavr/vavr-match/0.10.4/vavr-match-0.10.4.jar
[ERROR] Number of foreign imports: 1
[ERROR] import: Entry[import  from realm ClassRealm[maven.api, parent: null]]
[ERROR] 
[ERROR] -----------------------------------------------------

A clear and concise description of what the bug is.

To Reproduce
MAVEN_OPTS=-Dsettings.security=$HOME/.m2/settings-security.xml mvn org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign -Dsign.serverId="Flow Logix, Inc."

Expected behavior
Plugin works

Assert signature file name syntax

It will be good to have some assertions for the syntax of signature file names.

We can add postbuild.groovy to IT tests and verify if correct filename was created.

Support using this plugin out of maven projects

I'm using mvn gpg:sign-and-deploy-file to sign and create a staging repo from an existing artifact (Built using Gradle in android) before publishing it to the Nexus repo (Sonatype)
The main issue I'm facing currently is using this method in CI/CD because I need to share the same gpg key across all my agents in the cloud.

I would like to have a Solution as you provide, signing with the private key stored in environment variables without need to copy and share the full .gnupg directory.

Is there a way to use your plugin in that kind of situation? in all the examples I see a project pom.xml file but I don't have one, if you have a way to do that using CLI commands it will be great...

Thanks

Some extension project fail with 'has no file' error message.

Describe the bug
Some extension project fail with 'has no file' error message.

There are some module in multi module project which have no jar artifact, uses karaf-feature extension plugin.

To Reproduce

Create a project with

<artifactId>osgi-asciidoc-converter-karaf-features</artifactId> <packaging>feature</packaging>

where the parent project contains the sign plugin definition.

[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default) on project osgi-asciidoc-converter-karaf-features: Execution default of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Artifact: hu.blackbelt:osgi-asciidoc-converter-karaf-features:feature:1.0.0.20211221_210526_f25d548e_feature_JNG_3407_AddNewGPGAndTagAction has no file -> [Help 1]

Expected behavior

Build have to be success

Are ED25519 keys supported?

Is your feature request related to a problem? Please describe.
Am interested are ED25519 keys supported?

Describe the solution you'd like
To have them supported.

Describe alternatives you've considered
None

Additional context
Would like to sign artifacts with ED25519 keys

Split package openpgp to make it reusable

Is your feature request related to a problem? Please describe.
I'd like to reuse openpgp package, but depending on a maven-plugin is a no-no.

Describe the solution you'd like
Ideally a small reusable openpgp library that is used by this plugin as a dependency. Same stands for me, I'd like to depend on new openpgp.

Describe alternatives you've considered
Lift the sources? 😄

Additional context
Maven Plugins are just that: maven plugins and are not reusable as libs. Hence, I myself always tend to keep maven-plugins as "thin" as possible (basically just config + calls into "real thing").

What is the correct private key content for `SIGN-KEY` environment variable

I want to use SIGN_KEY environment variable to pass on my secret key. However, the private key content exported by command ,gpg --export-secret-keys -a, has line breaks and it can't be set in our CI system environment. What is the correct private key content for SIGN-KEY?

[Feature] Add option to fail if the key cannot be found/signing cannot be done

Is your feature request related to a problem? Please describe.
I want my build to fail if I somehow forget to add the signing key or if signing somehow fails.

Describe the solution you'd like
Add an option to prevent the signing goal to be skipped in case we're missing the key/pass (environment) variables.

Describe alternatives you've considered
Nothing.

Additional context
This is useful for preventing the build from succeeding if it's being done for publishing releases when signing is required.

GPG Agent support

Is your feature request related to a problem? Please describe.
Would be nice if gpg-agent could be used.

Describe the solution you'd like
Would be nice if gpg-agent could be used.

Describe alternatives you've considered
Would be nice if gpg-agent could be used.

Additional context
Would be nice if gpg-agent could be used.

😄

releases 0.1.0 and 0.2.0 are not reproducible

see https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/simplify4u/plugins/sign-maven-plugin/sign-maven-plugin-0.1.0.diffoscope

it seems sisu-maven-plugin version used doe not contain eclipse/sisu.inject#5

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.