s4u / sign-maven-plugin Goto Github PK
View Code? Open in Web Editor NEWMaven plugin which creates Open PGP / GPG signatures for all of the project's artifacts
Home Page: https://www.simplify4u.org/sign-maven-plugin/
License: Apache License 2.0
Maven plugin which creates Open PGP / GPG signatures for all of the project's artifacts
Home Page: https://www.simplify4u.org/sign-maven-plugin/
License: Apache License 2.0
Is your feature request related to a problem? Please describe.
I'd like to reuse openpgp package, but depending on a maven-plugin is a no-no.
Describe the solution you'd like
Ideally a small reusable openpgp library that is used by this plugin as a dependency. Same stands for me, I'd like to depend on new openpgp.
Describe alternatives you've considered
Lift the sources? ๐
Additional context
Maven Plugins are just that: maven plugins and are not reusable as libs. Hence, I myself always tend to keep maven-plugins as "thin" as possible (basically just config + calls into "real thing").
I want to use SIGN_KEY environment variable to pass on my secret key. However, the private key content exported by command ,gpg --export-secret-keys -a
, has line breaks and it can't be set in our CI system environment. What is the correct private key content for SIGN-KEY
?
In PR #16 we introduced the workaround .filter(s -> !"null".equals(s));
for MSHARED-969 and MINVOKER-273. As soon as those issues have been resolved and their solution is published on Maven Central, we should replace the workaround by a dependency upgrade.
There are questions open wrt to how we currently perform the expiration check for the secret key, see bcgit/bc-java#861. Once this issue is resolved, we possibly need to revise our existing solution.
Describe the bug
Some extension project fail with 'has no file' error message.
There are some module in multi module project which have no jar artifact, uses karaf-feature extension plugin.
To Reproduce
Create a project with
<artifactId>osgi-asciidoc-converter-karaf-features</artifactId> <packaging>feature</packaging>
where the parent project contains the sign plugin definition.
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default) on project osgi-asciidoc-converter-karaf-features: Execution default of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Artifact: hu.blackbelt:osgi-asciidoc-converter-karaf-features:feature:1.0.0.20211221_210526_f25d548e_feature_JNG_3407_AddNewGPGAndTagAction has no file -> [Help 1]
Expected behavior
Build have to be success
It will be good to have some assertions for the syntax of signature file names.
We can add postbuild.groovy
to IT tests and verify if correct filename was created.
currently signature file don't have version in name, eg we have:
target/artifactName-Version.jar
target/artifactName.jar.asc
should be:
target/artifactName-Version.jar
target/artifactName-Version.jar.asc
It doesn't has impact on result because proper artifact is attached
Is your feature request related to a problem? Please describe.
Would be nice if gpg-agent could be used.
Describe the solution you'd like
Would be nice if gpg-agent could be used.
Describe alternatives you've considered
Would be nice if gpg-agent could be used.
Additional context
Would be nice if gpg-agent could be used.
๐
Describe the bug
mvn -v
Apache Maven 4.0.0-alpha-12 (e627879aedd8a0c1859e58a527852ae8de1b4878)
Maven home: /Users/lprimak/.sdkman/candidates/maven/current
Java version: 21.0.2, vendor: Azul Systems, Inc., runtime: /Users/lprimak/.sdkman/candidates/java/21.0.2.fx-zulu/zulu-21.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "12.7.3", arch: "x86_64", family: "mac"
Log:
[INFO] BUILD FAILURE
[INFO] --------------------------------------------------------------------------------------------------------------------------
[INFO] Total time: 1.401 s
[INFO] Finished at: 2024-02-13T18:52:48-06:00
[INFO] --------------------------------------------------------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign (default-cli) on project base-pom: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign failed: An API incompatibility was encountered while executing org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign: java.lang.NoSuchMethodError: 'org.eclipse.aether.transform.FileTransformerManager org.eclipse.aether.RepositorySystemSession.getFileTransformerManager()'
[ERROR] -----------------------------------------------------
[ERROR] realm = plugin>org.simplify4u.plugins:sign-maven-plugin:1.0.1
[ERROR] strategy = org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy
[ERROR] urls[0] = file:/Users/lprimak/.m2/repository/org/simplify4u/plugins/sign-maven-plugin/1.0.1/sign-maven-plugin-1.0.1.jar
[ERROR] urls[1] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar
[ERROR] urls[2] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-utils/3.4.1/plexus-utils-3.4.1.jar
[ERROR] urls[3] = file:/Users/lprimak/.m2/repository/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar
[ERROR] urls[4] = file:/Users/lprimak/.m2/repository/org/bouncycastle/bcpg-jdk15on/1.70/bcpg-jdk15on-1.70.jar
[ERROR] urls[5] = file:/Users/lprimak/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.70/bcprov-jdk15on-1.70.jar
[ERROR] urls[6] = file:/Users/lprimak/.m2/repository/io/vavr/vavr/0.10.4/vavr-0.10.4.jar
[ERROR] urls[7] = file:/Users/lprimak/.m2/repository/io/vavr/vavr-match/0.10.4/vavr-match-0.10.4.jar
[ERROR] Number of foreign imports: 1
[ERROR] import: Entry[import from realm ClassRealm[maven.api, parent: null]]
[ERROR]
[ERROR] -----------------------------------------------------
A clear and concise description of what the bug is.
To Reproduce
MAVEN_OPTS=-Dsettings.security=$HOME/.m2/settings-security.xml mvn org.simplify4u.plugins:sign-maven-plugin:1.0.1:sign -Dsign.serverId="Flow Logix, Inc."
Expected behavior
Plugin works
it seems sisu-maven-plugin version used doe not contain eclipse-sisu/sisu-project#5
Is your feature request related to a problem? Please describe.
I want my build to fail if I somehow forget to add the signing key or if signing somehow fails.
Describe the solution you'd like
Add an option to prevent the signing goal to be skipped in case we're missing the key/pass (environment) variables.
Describe alternatives you've considered
Nothing.
Additional context
This is useful for preventing the build from succeeding if it's being done for publishing releases when signing is required.
Describe the bug
Cannot sing artifacts, the plugin says
Caused by: org.bouncycastle.openpgp.PGPException: checksum mismatch at in checksum of 20 bytes
at org.bouncycastle.openpgp.PGPSecretKey.extractKeyData (Unknown Source)
at org.bouncycastle.openpgp.PGPSecretKey.extractPrivateKey (Unknown Source)
at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:140)
at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:81)
at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:206)
To Reproduce
I have prepared key following by Private key preparation:
gpg --full-gen-key
gpg --list-secret-keys --keyid-format long
Also I have tried to use an encrypted passphrase but had same result
mvn -Prelease -Dsign.keyPass=encrypted-passphrase= -Dsettings.security=~/.m2/settings-security.xml
Expected behavior
Artifacts are signed.
Additional context
My plugin configuration:
<profile>
<id>release</id>
<build>
<plugins>
<plugin>
<groupId>org.simplify4u.plugins</groupId>
<artifactId>sign-maven-plugin</artifactId>
<version>1.0.1</version>
<executions>
<execution>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
Maven allow encrypt passwords https://maven.apache.org/guides/mini/guide-encryption.html
We should have possibility to provide encrypted version of key password using Maven mechanizm.
For this issue we will create IT test to verify in real execution.
I'm using mvn gpg:sign-and-deploy-file to sign and create a staging repo from an existing artifact (Built using Gradle in android) before publishing it to the Nexus repo (Sonatype)
The main issue I'm facing currently is using this method in CI/CD because I need to share the same gpg key across all my agents in the cloud.
I would like to have a Solution as you provide, signing with the private key stored in environment variables without need to copy and share the full .gnupg directory.
Is there a way to use your plugin in that kind of situation? in all the examples I see a project pom.xml file but I don't have one, if you have a way to do that using CLI commands it will be great...
Thanks
Describe the bug
The documentation states that there is 3 ways to pass the required parameters:
But only the command line arguments is working.
As this is a really big issue, maybe I did something wrong.
To Reproduce
I followed the tutorial https://www.simplify4u.org/sign-maven-plugin/key-prepare.html to create and export a key.
% cat pom.xml
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
...
<build>
<plugins>
<plugin>
<groupId>org.simplify4u.plugins</groupId>
<artifactId>sign-maven-plugin</artifactId>
<version>0.3.1</version>
<executions>
<execution>
<goals>
<goal>sign</goal>
</goals>
<configuration>
<keyId>9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D</keyId>
<keyPass>test</keyPass>
<keyFile>~/.m2/sign-key.ascxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</keyFile>
</configuration>
</execution>
</executions>
</plugin>
</plugins>
</build>
</project>
% mvn sign:sign -X
Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG] Imported: javax.annotation.* < plexus.core
[DEBUG] Imported: javax.annotation.security.* < plexus.core
[DEBUG] Imported: javax.enterprise.inject.* < plexus.core
[DEBUG] Imported: javax.enterprise.util.* < plexus.core
[DEBUG] Imported: javax.inject.* < plexus.core
[DEBUG] Imported: org.apache.maven.* < plexus.core
[DEBUG] Imported: org.apache.maven.artifact < plexus.core
[DEBUG] Imported: org.apache.maven.classrealm < plexus.core
[DEBUG] Imported: org.apache.maven.cli < plexus.core
[DEBUG] Imported: org.apache.maven.configuration < plexus.core
[DEBUG] Imported: org.apache.maven.exception < plexus.core
[DEBUG] Imported: org.apache.maven.execution < plexus.core
[DEBUG] Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG] Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG] Imported: org.apache.maven.model < plexus.core
[DEBUG] Imported: org.apache.maven.monitor < plexus.core
[DEBUG] Imported: org.apache.maven.plugin < plexus.core
[DEBUG] Imported: org.apache.maven.profiles < plexus.core
[DEBUG] Imported: org.apache.maven.project < plexus.core
[DEBUG] Imported: org.apache.maven.reporting < plexus.core
[DEBUG] Imported: org.apache.maven.repository < plexus.core
[DEBUG] Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG] Imported: org.apache.maven.settings < plexus.core
[DEBUG] Imported: org.apache.maven.toolchain < plexus.core
[DEBUG] Imported: org.apache.maven.usability < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG] Imported: org.codehaus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.* < plexus.core
[DEBUG] Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.component < plexus.core
[DEBUG] Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG] Imported: org.codehaus.plexus.container < plexus.core
[DEBUG] Imported: org.codehaus.plexus.context < plexus.core
[DEBUG] Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG] Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG] Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG] Imported: org.eclipse.aether.* < plexus.core
[DEBUG] Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG] Imported: org.eclipse.aether.collection < plexus.core
[DEBUG] Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG] Imported: org.eclipse.aether.graph < plexus.core
[DEBUG] Imported: org.eclipse.aether.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.installation < plexus.core
[DEBUG] Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG] Imported: org.eclipse.aether.repository < plexus.core
[DEBUG] Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG] Imported: org.eclipse.aether.spi < plexus.core
[DEBUG] Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG] Imported: org.eclipse.aether.version < plexus.core
[DEBUG] Imported: org.fusesource.jansi.* < plexus.core
[DEBUG] Imported: org.slf4j.* < plexus.core
[DEBUG] Imported: org.slf4j.event.* < plexus.core
[DEBUG] Imported: org.slf4j.helpers.* < plexus.core
[DEBUG] Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks: [sign:sign]
[DEBUG] Style: Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins) : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal: org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style: Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
<keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
<keyId>${sign.keyId}</keyId>
<keyPass>${sign.keyPass}</keyPass>
<skip default-value="false">${sign.skip}</skip>
<skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=583479, ConflictMarker.markTime=149590, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=383584, ConflictIdSorter.topsortTime=344586, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3875513, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=168430460, DefaultDependencyCollector.transformTime=6670117}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG] org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG] org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG] org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG] org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG] org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG] commons-io:commons-io:jar:2.5:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG] javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG] javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG] com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG] aopalliance:aopalliance:jar:1.0:compile
[DEBUG] com.google.guava:guava:jar:25.1-android:compile
[DEBUG] com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG] org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG] com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG] com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG] org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG] javax.inject:javax.inject:jar:1:compile
[DEBUG] org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG] org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG] org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG] org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG] org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG] org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG] org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG] io.vavr:vavr:jar:0.10.3:compile
[DEBUG] io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG] org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Imported: < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG] Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG] Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG] Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG] Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG] Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG] Included: commons-io:commons-io:jar:2.5
[DEBUG] Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG] Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG] Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG] Included: aopalliance:aopalliance:jar:1.0
[DEBUG] Included: com.google.guava:guava:jar:25.1-android
[DEBUG] Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG] Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG] Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG] Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG] Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG] Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG] Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG] Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG] Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG] Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG] Included: io.vavr:vavr:jar:0.10.3
[DEBUG] Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG] (f) keyFile = /home/someuser/.m2/sign-key.asc
[DEBUG] (f) skip = false
[DEBUG] (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 0.512 s
[INFO] Finished at: 2021-09-22T18:13:35+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key is encrypted - keyPass is required
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:148)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.simplify4u.plugins.sign.openpgp.PGPSignerException: Secret key is encrypted - keyPass is required
at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:130)
at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:80)
at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:151)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
[ERROR]
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException
% mvn sign:sign -X -Dsign.keyFile=~/.m2/sign-key.asc -Dsign.keyId=9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D -Dsign.keyPass=test
Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG] Imported: javax.annotation.* < plexus.core
[DEBUG] Imported: javax.annotation.security.* < plexus.core
[DEBUG] Imported: javax.enterprise.inject.* < plexus.core
[DEBUG] Imported: javax.enterprise.util.* < plexus.core
[DEBUG] Imported: javax.inject.* < plexus.core
[DEBUG] Imported: org.apache.maven.* < plexus.core
[DEBUG] Imported: org.apache.maven.artifact < plexus.core
[DEBUG] Imported: org.apache.maven.classrealm < plexus.core
[DEBUG] Imported: org.apache.maven.cli < plexus.core
[DEBUG] Imported: org.apache.maven.configuration < plexus.core
[DEBUG] Imported: org.apache.maven.exception < plexus.core
[DEBUG] Imported: org.apache.maven.execution < plexus.core
[DEBUG] Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG] Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG] Imported: org.apache.maven.model < plexus.core
[DEBUG] Imported: org.apache.maven.monitor < plexus.core
[DEBUG] Imported: org.apache.maven.plugin < plexus.core
[DEBUG] Imported: org.apache.maven.profiles < plexus.core
[DEBUG] Imported: org.apache.maven.project < plexus.core
[DEBUG] Imported: org.apache.maven.reporting < plexus.core
[DEBUG] Imported: org.apache.maven.repository < plexus.core
[DEBUG] Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG] Imported: org.apache.maven.settings < plexus.core
[DEBUG] Imported: org.apache.maven.toolchain < plexus.core
[DEBUG] Imported: org.apache.maven.usability < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG] Imported: org.codehaus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.* < plexus.core
[DEBUG] Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.component < plexus.core
[DEBUG] Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG] Imported: org.codehaus.plexus.container < plexus.core
[DEBUG] Imported: org.codehaus.plexus.context < plexus.core
[DEBUG] Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG] Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG] Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG] Imported: org.eclipse.aether.* < plexus.core
[DEBUG] Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG] Imported: org.eclipse.aether.collection < plexus.core
[DEBUG] Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG] Imported: org.eclipse.aether.graph < plexus.core
[DEBUG] Imported: org.eclipse.aether.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.installation < plexus.core
[DEBUG] Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG] Imported: org.eclipse.aether.repository < plexus.core
[DEBUG] Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG] Imported: org.eclipse.aether.spi < plexus.core
[DEBUG] Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG] Imported: org.eclipse.aether.version < plexus.core
[DEBUG] Imported: org.fusesource.jansi.* < plexus.core
[DEBUG] Imported: org.slf4j.* < plexus.core
[DEBUG] Imported: org.slf4j.event.* < plexus.core
[DEBUG] Imported: org.slf4j.helpers.* < plexus.core
[DEBUG] Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks: [sign:sign]
[DEBUG] Style: Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins) : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal: org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style: Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
<keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
<keyId>${sign.keyId}</keyId>
<keyPass>${sign.keyPass}</keyPass>
<skip default-value="false">${sign.skip}</skip>
<skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=424721, ConflictMarker.markTime=126989, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=255057, ConflictIdSorter.topsortTime=168119, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3823859, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=158085101, DefaultDependencyCollector.transformTime=5704309}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG] org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG] org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG] org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG] org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG] org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG] commons-io:commons-io:jar:2.5:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG] javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG] javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG] com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG] aopalliance:aopalliance:jar:1.0:compile
[DEBUG] com.google.guava:guava:jar:25.1-android:compile
[DEBUG] com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG] org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG] com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG] com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG] org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG] javax.inject:javax.inject:jar:1:compile
[DEBUG] org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG] org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG] org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG] org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG] org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG] org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG] org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG] io.vavr:vavr:jar:0.10.3:compile
[DEBUG] io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG] org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Imported: < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG] Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG] Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG] Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG] Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG] Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG] Included: commons-io:commons-io:jar:2.5
[DEBUG] Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG] Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG] Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG] Included: aopalliance:aopalliance:jar:1.0
[DEBUG] Included: com.google.guava:guava:jar:25.1-android
[DEBUG] Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG] Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG] Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG] Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG] Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG] Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG] Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG] Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG] Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG] Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG] Included: io.vavr:vavr:jar:0.10.3
[DEBUG] Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG] (f) keyFile = /home/someuser/Projets/Personnel/Java/ndd-maven-parent/~/.m2/sign-key.asc
[DEBUG] (f) keyId = 9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D
[DEBUG] (f) keyPass = test
[DEBUG] (f) skip = false
[DEBUG] (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] Sign - key not found - skip execution
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 0.494 s
[INFO] Finished at: 2021-09-22T18:13:50+02:00
[INFO] ------------------------------------------------------------------------
% SIGN_KEY=~/.m2/sign-key.asc SIGN_KEY_ID=9D08D506AB01D82A8E7090F0C0FF87F9EEC1EF5D SIGN_KEY_PASS=test mvn sign:sign -X
Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG] Imported: javax.annotation.* < plexus.core
[DEBUG] Imported: javax.annotation.security.* < plexus.core
[DEBUG] Imported: javax.enterprise.inject.* < plexus.core
[DEBUG] Imported: javax.enterprise.util.* < plexus.core
[DEBUG] Imported: javax.inject.* < plexus.core
[DEBUG] Imported: org.apache.maven.* < plexus.core
[DEBUG] Imported: org.apache.maven.artifact < plexus.core
[DEBUG] Imported: org.apache.maven.classrealm < plexus.core
[DEBUG] Imported: org.apache.maven.cli < plexus.core
[DEBUG] Imported: org.apache.maven.configuration < plexus.core
[DEBUG] Imported: org.apache.maven.exception < plexus.core
[DEBUG] Imported: org.apache.maven.execution < plexus.core
[DEBUG] Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG] Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG] Imported: org.apache.maven.model < plexus.core
[DEBUG] Imported: org.apache.maven.monitor < plexus.core
[DEBUG] Imported: org.apache.maven.plugin < plexus.core
[DEBUG] Imported: org.apache.maven.profiles < plexus.core
[DEBUG] Imported: org.apache.maven.project < plexus.core
[DEBUG] Imported: org.apache.maven.reporting < plexus.core
[DEBUG] Imported: org.apache.maven.repository < plexus.core
[DEBUG] Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG] Imported: org.apache.maven.settings < plexus.core
[DEBUG] Imported: org.apache.maven.toolchain < plexus.core
[DEBUG] Imported: org.apache.maven.usability < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG] Imported: org.codehaus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.* < plexus.core
[DEBUG] Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.component < plexus.core
[DEBUG] Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG] Imported: org.codehaus.plexus.container < plexus.core
[DEBUG] Imported: org.codehaus.plexus.context < plexus.core
[DEBUG] Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG] Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG] Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG] Imported: org.eclipse.aether.* < plexus.core
[DEBUG] Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG] Imported: org.eclipse.aether.collection < plexus.core
[DEBUG] Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG] Imported: org.eclipse.aether.graph < plexus.core
[DEBUG] Imported: org.eclipse.aether.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.installation < plexus.core
[DEBUG] Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG] Imported: org.eclipse.aether.repository < plexus.core
[DEBUG] Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG] Imported: org.eclipse.aether.spi < plexus.core
[DEBUG] Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG] Imported: org.eclipse.aether.version < plexus.core
[DEBUG] Imported: org.fusesource.jansi.* < plexus.core
[DEBUG] Imported: org.slf4j.* < plexus.core
[DEBUG] Imported: org.slf4j.event.* < plexus.core
[DEBUG] Imported: org.slf4j.helpers.* < plexus.core
[DEBUG] Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/someuser/.sdkman/candidates/maven/current/conf/settings.xml
[DEBUG] Reading user settings from /home/someuser/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/someuser/.sdkman/candidates/maven/current/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/someuser/.m2/toolchains.xml
[DEBUG] Using local repository at /home/someuser/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/someuser/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Extension realms for project name.didier.david:ndd-maven-parent:pom:0.3.0: (none)
[DEBUG] Looking up lifecycle mappings for packaging pom from ClassRealm[plexus.core, parent: null]
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Tasks: [sign:sign]
[DEBUG] Style: Regular
[DEBUG] =======================================================================
[INFO]
[INFO] -----------------< name.didier.david:ndd-maven-parent >-----------------
[INFO] Building ndd-maven-parent 0.3.0
[INFO] --------------------------------[ pom ]---------------------------------
[DEBUG] Resolving plugin prefix sign from [org.apache.maven.plugins, org.codehaus.mojo]
[DEBUG] Resolved plugin prefix sign to org.simplify4u.plugins:sign-maven-plugin from POM name.didier.david:ndd-maven-parent:pom:0.3.0
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project: name.didier.david:ndd-maven-parent:0.3.0
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [maven.gitlab.thalesdigital (https://gitlab.thalesdigital.io/api/v4/groups/loom/-/packages/maven, default, releases+snapshots), central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] Repositories (plugins) : [central (https://repo.maven.apache.org/maven2, default, releases)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal: org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli)
[DEBUG] Style: Regular
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
<keyFile default-value="${user.home}/.m2/sign-key.asc">${sign.keyFile}</keyFile>
<keyId>${sign.keyId}</keyId>
<keyPass>${sign.keyPass}</keyPass>
<skip default-value="false">${sign.skip}</skip>
<skipNoKey default-value="true">${sign.skipNoKey}</skipNoKey>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- sign-maven-plugin:0.3.1:sign (default-cli) @ ndd-maven-parent ---
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for repository.jboss.org (http://repository.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for snapshots.jboss.org (http://snapshots.jboss.org/maven2).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for oss.sonatype.org/jboss-snapshots (http://oss.sonatype.org/content/repositories/jboss-snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for apache.snapshots (http://repository.apache.org/snapshots).
[DEBUG] Using mirror maven-default-http-blocker (http://0.0.0.0/) for codehaus-snapshots (http://nexus.codehaus.org/snapshots/).
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=477597, ConflictMarker.markTime=135184, ConflictMarker.nodeCount=88, ConflictIdSorter.graphTime=240373, ConflictIdSorter.topsortTime=169962, ConflictIdSorter.conflictIdCount=42, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=3510919, ConflictResolver.conflictItemCount=86, DefaultDependencyCollector.collectTime=159820128, DefaultDependencyCollector.transformTime=5423694}
[DEBUG] org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] org.apache.maven:maven-core:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-model:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-settings-builder:jar:3.6.0:compile
[DEBUG] org.codehaus.plexus:plexus-interpolation:jar:1.25:compile
[DEBUG] org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG] org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG] org.apache.maven:maven-builder-support:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-repository-metadata:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-artifact:jar:3.6.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-model-builder:jar:3.6.0:compile
[DEBUG] org.apache.maven:maven-resolver-provider:jar:3.6.0:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-impl:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-api:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-spi:jar:1.3.1:compile
[DEBUG] org.apache.maven.resolver:maven-resolver-util:jar:1.3.1:compile
[DEBUG] org.apache.maven.shared:maven-shared-utils:jar:3.2.1:compile
[DEBUG] commons-io:commons-io:jar:2.5:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.3:compile
[DEBUG] javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG] javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4:compile (version managed from default)
[DEBUG] com.google.inject:guice:jar:no_aop:4.2.1:compile
[DEBUG] aopalliance:aopalliance:jar:1.0:compile
[DEBUG] com.google.guava:guava:jar:25.1-android:compile
[DEBUG] com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG] org.checkerframework:checker-compat-qual:jar:2.0.0:compile
[DEBUG] com.google.errorprone:error_prone_annotations:jar:2.1.3:compile
[DEBUG] com.google.j2objc:j2objc-annotations:jar:1.1:compile
[DEBUG] org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:compile
[DEBUG] javax.inject:javax.inject:jar:1:compile
[DEBUG] org.codehaus.plexus:plexus-utils:jar:3.3.0:compile (version managed from default)
[DEBUG] org.codehaus.plexus:plexus-classworlds:jar:2.5.2:compile
[DEBUG] org.codehaus.plexus:plexus-component-annotations:jar:2.1.0:compile (version managed from default)
[DEBUG] org.apache.commons:commons-lang3:jar:3.8.1:compile
[DEBUG] org.apache.maven:maven-plugin-api:jar:3.6.0:compile
[DEBUG] org.bouncycastle:bcpg-jdk15on:jar:1.68:compile
[DEBUG] org.bouncycastle:bcprov-jdk15on:jar:1.68:compile
[DEBUG] io.vavr:vavr:jar:0.10.3:compile
[DEBUG] io.vavr:vavr-match:jar:0.10.3:compile
[DEBUG] org.slf4j:slf4j-api:jar:1.7.30:compile
[DEBUG] Created new class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Importing foreign packages into class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Imported: < maven.api
[DEBUG] Populating class realm plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1
[DEBUG] Included: org.simplify4u.plugins:sign-maven-plugin:jar:0.3.1
[DEBUG] Included: org.codehaus.plexus:plexus-interpolation:jar:1.25
[DEBUG] Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG] Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG] Included: org.apache.maven:maven-builder-support:jar:3.6.0
[DEBUG] Included: org.apache.maven.resolver:maven-resolver-util:jar:1.3.1
[DEBUG] Included: org.apache.maven.shared:maven-shared-utils:jar:3.2.1
[DEBUG] Included: commons-io:commons-io:jar:2.5
[DEBUG] Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG] Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.4
[DEBUG] Included: com.google.inject:guice:jar:no_aop:4.2.1
[DEBUG] Included: aopalliance:aopalliance:jar:1.0
[DEBUG] Included: com.google.guava:guava:jar:25.1-android
[DEBUG] Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG] Included: org.checkerframework:checker-compat-qual:jar:2.0.0
[DEBUG] Included: com.google.errorprone:error_prone_annotations:jar:2.1.3
[DEBUG] Included: com.google.j2objc:j2objc-annotations:jar:1.1
[DEBUG] Included: org.codehaus.mojo:animal-sniffer-annotations:jar:1.14
[DEBUG] Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG] Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.0
[DEBUG] Included: org.apache.commons:commons-lang3:jar:3.8.1
[DEBUG] Included: org.bouncycastle:bcpg-jdk15on:jar:1.68
[DEBUG] Included: org.bouncycastle:bcprov-jdk15on:jar:1.68
[DEBUG] Included: io.vavr:vavr:jar:0.10.3
[DEBUG] Included: io.vavr:vavr-match:jar:0.10.3
[DEBUG] Configuring mojo org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign from plugin realm ClassRealm[plugin>org.simplify4u.plugins:sign-maven-plugin:0.3.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@443b7951]
[DEBUG] Configuring mojo 'org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign' with basic configurator -->
[DEBUG] (f) keyFile = /home/someuser/.m2/sign-key.asc
[DEBUG] (f) skip = false
[DEBUG] (f) skipNoKey = true
[DEBUG] -- end configuration --
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 0.483 s
[INFO] Finished at: 2021-09-22T18:15:11+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign (default-cli) on project ndd-maven-parent: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution default-cli of goal org.simplify4u.plugins:sign-maven-plugin:0.3.1:sign failed: Secret key not found
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:148)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.simplify4u.plugins.sign.openpgp.PGPSignerException: Secret key not found
at org.simplify4u.plugins.sign.openpgp.PGPSigner.lambda$loadKey$2 (PGPSigner.java:121)
at java.util.Optional.orElseThrow (Optional.java:403)
at org.simplify4u.plugins.sign.openpgp.PGPSigner.loadKey (PGPSigner.java:121)
at org.simplify4u.plugins.sign.openpgp.PGPSigner.setKeyInfo (PGPSigner.java:80)
at org.simplify4u.plugins.sign.ArtifactSigner.setKeyInfo (ArtifactSigner.java:102)
at org.simplify4u.plugins.sign.ArtifactSignerFactory.getSigner (ArtifactSignerFactory.java:57)
at org.simplify4u.plugins.sign.SignMojo.execute (SignMojo.java:151)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:972)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:78)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
[ERROR]
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException
Using:
% mvn -v
Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f)
Maven home: /home/someuser/.sdkman/candidates/maven/current
Java version: 16.0.1, vendor: AdoptOpenJDK, runtime: /home/someuser/.sdkman/candidates/java/16.0.1.hs-adpt
Default locale: fr_FR, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-27-generic", arch: "amd64", family: "unix"
Expected behavior
Environment variables and POM configuration should work.
Key expiration time should be checked and when key expire signing should fail.
Describe the bug
Using the plugin to sing a jar throws the exception: org.bouncycastle.openpgp.PGPException: Exception constructing key: EdDSA KeyFactory not available
To Reproduce
Executing maven clean install with the following plugin configuration
<plugin>
<groupId>org.simplify4u.plugins</groupId>
<artifactId>sign-maven-plugin</artifactId>
<version>1.0.0</version>
<executions>
<execution>
<goals>
<goal>sign</goal>
</goals>
<configuration>
<keyFile><!-- Value here --></keyFile>
<keyId><!-- Value here --></keyId>
<keyPass><!-- Value here --></keyPass>
</configuration>
</execution>
</executions>
</plugin>
Expected behavior
Sign the jar
Additional context
OS: Windows 10
JDK: Oracle 1.8
Add suport tilde ~
in key file path.
If keyFile
begin with tilde followed by /
slash or \
backslash depends on os, like
~/path-to-key.asc
should be replace by
${user.home}/path-to-key.asc
In class PGPKeyInfo
we need to change method keyFromFile
and confirm by unit tests
Keys configuration params:
can be provided by maven configuration or by environment.
In order to help in investigation problems with configuration we should log in debug
level source of params maven or environment variables.
pass and private key must be masked and only first and last significant characters should be logged.
As Sonatype requires each Maven artifact having the public key used for signing artifacts uploaded to some public keyserver (https://central.sonatype.org/publish/requirements/gpg/#distributing-your-public-key) it would be nice to check this requirement during the release of the project with a dedicated Maven plugin goal.
Not sure whether this goal would make more sense in this plugin or rather https://www.simplify4u.org/sign-maven-plugin/
Is your feature request related to a problem? Please describe.
Am interested are ED25519 keys supported?
Describe the solution you'd like
To have them supported.
Describe alternatives you've considered
None
Additional context
Would like to sign artifacts with ED25519 keys
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.