Page MenuHome GnuPG
Create Task
Maniphest T4930

Support --multifile --detach-sign
Open, WishlistPublic
Actions

Description

maven-gpg-plugin currently has to spawn a new process for signing each file. This causes quite a big overhead when releasing big projects with hundreds of artifacts to sign.

Would it please be possible to support something like

gpg --multifile --detach-sign --armor --output "%s.asc" file-1.jar file-2.jar file-3.jar

where %s.asc is a template for the output file, so that the above would produce file-1.jar.asc, file-2.jar.asc and file-3.jar.asc?

Details

External Link
https://issues.apache.org/jira/browse/MGPG-82

Event Timeline

ppalaga created this task.Apr 29 2020, 10:20 AM
ppalaga set External Link to https://issues.apache.org/jira/browse/MGPG-82.Apr 29 2020, 10:24 AM
ppalaga updated the task description. (Show Details)Apr 29 2020, 10:29 AM
• werner added a subscriber: • werner.Apr 29 2020, 11:54 AM

API-wise this would be possible because right now gpg errors out with

gpg: --sign does not yet work with --multifile

I need to see whether we can add such a feature to the stable branch.

ppalaga added a comment.Apr 29 2020, 6:26 PM

That would be awesome, thanks!

aheinecke assigned this task to • werner.May 8 2020, 11:47 AM
aheinecke triaged this task as Wishlist priority.