Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

tycho-gpg:3.0.0:sign-p2-artifacts creates incorrect values for property pgp.publicKeys #1706

Closed
kwin opened this issue Nov 21, 2022 · 2 comments · Fixed by #1707
Closed

tycho-gpg:3.0.0:sign-p2-artifacts creates incorrect values for property pgp.publicKeys #1706

kwin opened this issue Nov 21, 2022 · 2 comments · Fixed by #1707
Milestone
4.0

Comments

@kwin
Copy link
Contributor

kwin commented Nov 21, 2022 •
edited
Loading

The value for the property "pgp.publicKeys" is way to large and not equal to my GPG public key of the keypair I signed with.
That affects the property within "repository" as well as below all artifacts.

I used the following pom.xml snippet to configure it:

<plugin>
  <groupId>org.eclipse.tycho</groupId>
  <artifactId>tycho-gpg-plugin</artifactId>
  <version>${tycho.version}</version>
  <executions>
    <execution>
      <id>sign-p2-artifacts</id>
      <goals>
        <goal>sign-p2-artifacts</goal>
      </goals>
    </execution>
  </executions>
</plugin>

The build itself passed without any errors.
The debug output exposes the following:

[INFO] --- tycho-gpg-plugin:3.0.0:sign-p2-artifacts (sign-p2-artifacts) @ org.apache.sling.ide.p2update ---
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.p2.metadata/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.p2.metadata/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.p2.core/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.p2.core/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.bouncycastle:bcpg-jdk18on/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.bouncycastle:bcpg-jdk18on/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.bouncycastle:bcprov-jdk18on/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.bouncycastle:bcprov-jdk18on/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.runtime/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.runtime/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.osgi:org.osgi.service.prefs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.osgi:org.osgi.service.prefs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.contenttype/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.app/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.common/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.tukaani:xz/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.tukaani:xz/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.registry/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.core.jobs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.preferences/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.p2.core/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.p2.core/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.eclipse.platform:org.eclipse.equinox.security/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.eclipse.platform:org.eclipse.equinox.security/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Could not find metadata org.osgi:org.osgi.service.prefs/maven-metadata.xml in local (/Users/konradwindszus/.m2/repository)
[DEBUG] Skipped remote request for org.osgi:org.osgi.service.prefs/maven-metadata.xml, locally cached metadata up-to-date
[DEBUG] Dependency collection stats {ConflictMarker.analyzeTime=1896042, ConflictMarker.markTime=694542, ConflictMarker.nodeCount=5019, ConflictIdSorter.graphTime=1913917, ConflictIdSorter.topsortTime=35666, ConflictIdSorter.conflictIdCount=69, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=646625, ConflictResolver.conflictItemCount=648, DefaultDependencyCollector.collectTime=53032042, DefaultDependencyCollector.transformTime=5205125}
[DEBUG] org.eclipse.tycho:tycho-gpg-plugin:jar:3.0.0
[DEBUG]    org.codehaus.plexus:plexus-utils:jar:3.4.2:compile
[DEBUG]    org.codehaus.plexus:plexus-archiver:jar:4.5.0:compile
[DEBUG]       javax.inject:javax.inject:jar:1:compile
[DEBUG]       org.codehaus.plexus:plexus-io:jar:3.4.0:compile
[DEBUG]       commons-io:commons-io:jar:2.11.0:compile
[DEBUG]       org.apache.commons:commons-compress:jar:1.21:compile (version managed from default)
[DEBUG]       org.slf4j:slf4j-api:jar:1.7.36:compile
[DEBUG]       org.iq80.snappy:snappy:jar:0.4:compile
[DEBUG]       org.tukaani:xz:jar:1.9:compile
[DEBUG]       com.github.luben:zstd-jni:jar:1.5.2-4:runtime
[DEBUG]    org.apache.maven.plugins:maven-gpg-plugin:jar:3.0.1:compile
[DEBUG]       org.apache.maven:maven-plugin-api:jar:3.8.6:provided (scope managed from default) (version managed from default)
[DEBUG]          org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.5:provided (scope managed from default) (version managed from default)
[DEBUG]             javax.annotation:javax.annotation-api:jar:1.2:provided
[DEBUG]          org.codehaus.plexus:plexus-classworlds:jar:2.6.0:compile
[DEBUG]       org.apache.maven:maven-core:jar:3.8.6:provided (scope managed from default) (version managed from default)
[DEBUG]          org.apache.maven:maven-settings-builder:jar:3.8.6:provided
[DEBUG]             org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0:provided
[DEBUG]                org.codehaus.plexus:plexus-cipher:jar:2.0:provided (version managed from default)
[DEBUG]          org.apache.maven:maven-builder-support:jar:3.8.6:provided
[DEBUG]          org.apache.maven:maven-repository-metadata:jar:3.8.6:provided
[DEBUG]          org.apache.maven:maven-resolver-provider:jar:3.8.6:provided
[DEBUG]          org.apache.maven.resolver:maven-resolver-impl:jar:1.6.3:provided
[DEBUG]          org.apache.maven.resolver:maven-resolver-api:jar:1.6.3:provided
[DEBUG]          org.apache.maven.resolver:maven-resolver-spi:jar:1.6.3:provided
[DEBUG]          org.apache.maven.resolver:maven-resolver-util:jar:1.6.3:provided
[DEBUG]          org.apache.maven.shared:maven-shared-utils:jar:3.3.4:compile
[DEBUG]          org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.5:provided
[DEBUG]          com.google.inject:guice:jar:no_aop:4.2.2:provided
[DEBUG]             aopalliance:aopalliance:jar:1.0:provided
[DEBUG]             com.google.guava:guava:jar:25.1-android:provided
[DEBUG]                com.google.code.findbugs:jsr305:jar:3.0.2:provided
[DEBUG]                org.checkerframework:checker-compat-qual:jar:2.0.0:provided
[DEBUG]                com.google.errorprone:error_prone_annotations:jar:2.1.3:provided
[DEBUG]                com.google.j2objc:j2objc-annotations:jar:1.1:provided
[DEBUG]                org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:provided
[DEBUG]          org.codehaus.plexus:plexus-interpolation:jar:1.26:compile
[DEBUG]          org.codehaus.plexus:plexus-component-annotations:jar:2.1.1:compile (version managed from default)
[DEBUG]          org.apache.commons:commons-lang3:jar:3.8.1:provided
[DEBUG]       org.apache.maven:maven-artifact:jar:3.8.6:provided (scope managed from default) (version managed from default)
[DEBUG]       org.apache.maven:maven-model:jar:3.8.6:provided (scope managed from default) (version managed from default)
[DEBUG]       org.apache.maven:maven-model-builder:jar:3.0:compile
[DEBUG]       org.apache.maven:maven-settings:jar:3.8.6:provided (scope managed from default) (version managed from default)
[DEBUG]       org.apache.maven.shared:maven-artifact-transfer:jar:0.12.0:compile
[DEBUG]          org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.1:compile
[DEBUG]             org.sonatype.sisu:sisu-inject-plexus:jar:1.4.2:compile
[DEBUG]                org.sonatype.sisu:sisu-inject-bean:jar:1.4.2:compile
[DEBUG]                   org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7:compile
[DEBUG]          commons-codec:commons-codec:jar:1.11:compile
[DEBUG]       org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG]          org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG]    org.eclipse.platform:org.eclipse.equinox.p2.artifact.repository:jar:1.4.500:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.common:jar:3.16.200:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.registry:jar:3.11.200:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.p2.metadata:jar:2.6.300:compile
[DEBUG]    org.eclipse.platform:org.eclipse.equinox.p2.repository:jar:2.6.200:compile
[DEBUG]       org.bouncycastle:bcprov-jdk18on:jar:1.71:compile (version managed from default)
[DEBUG]       org.bouncycastle:bcpg-jdk18on:jar:1.71:compile (version managed from default)
[DEBUG]       org.eclipse.platform:org.eclipse.core.jobs:jar:3.13.100:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.preferences:jar:3.10.100:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.p2.core:jar:2.9.200:compile
[DEBUG]          org.eclipse.platform:org.eclipse.core.runtime:jar:3.26.0:compile
[DEBUG]             org.eclipse.platform:org.eclipse.core.contenttype:jar:3.8.200:compile
[DEBUG]             org.eclipse.platform:org.eclipse.equinox.app:jar:1.6.200:compile
[DEBUG]       org.eclipse.platform:org.eclipse.equinox.security:jar:1.3.1000:compile
[DEBUG]       org.eclipse.platform:org.eclipse.osgi:jar:3.18.0:compile (version managed from default)
[DEBUG]       org.osgi:org.osgi.service.prefs:jar:1.1.2:compile
[DEBUG]          org.osgi:osgi.annotation:jar:8.0.1:compile
[DEBUG] Created new class realm plugin>org.eclipse.tycho:tycho-gpg-plugin:3.0.0
[DEBUG] Importing foreign packages into class realm plugin>org.eclipse.tycho:tycho-gpg-plugin:3.0.0
[DEBUG]   Imported:  < project>org.apache.sling.ide:org.apache.sling.ide.p2update:1.2.3-SNAPSHOT
[DEBUG] Populating class realm plugin>org.eclipse.tycho:tycho-gpg-plugin:3.0.0
[DEBUG]   Included: org.eclipse.tycho:tycho-gpg-plugin:jar:3.0.0
[DEBUG]   Included: org.codehaus.plexus:plexus-utils:jar:3.4.2
[DEBUG]   Included: org.codehaus.plexus:plexus-archiver:jar:4.5.0
[DEBUG]   Included: org.codehaus.plexus:plexus-io:jar:3.4.0
[DEBUG]   Included: commons-io:commons-io:jar:2.11.0
[DEBUG]   Included: org.apache.commons:commons-compress:jar:1.21
[DEBUG]   Included: org.iq80.snappy:snappy:jar:0.4
[DEBUG]   Included: org.tukaani:xz:jar:1.9
[DEBUG]   Included: com.github.luben:zstd-jni:jar:1.5.2-4
[DEBUG]   Included: org.apache.maven.plugins:maven-gpg-plugin:jar:3.0.1
[DEBUG]   Included: org.apache.maven.shared:maven-shared-utils:jar:3.3.4
[DEBUG]   Included: org.codehaus.plexus:plexus-interpolation:jar:1.26
[DEBUG]   Included: org.codehaus.plexus:plexus-component-annotations:jar:2.1.1
[DEBUG]   Included: org.apache.maven.shared:maven-artifact-transfer:jar:0.12.0
[DEBUG]   Included: org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.1
[DEBUG]   Included: org.sonatype.sisu:sisu-inject-bean:jar:1.4.2
[DEBUG]   Included: org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7
[DEBUG]   Included: commons-codec:commons-codec:jar:1.11
[DEBUG]   Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG]   Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.p2.artifact.repository:jar:1.4.500
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.common:jar:3.16.200
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.registry:jar:3.11.200
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.p2.metadata:jar:2.6.300
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.p2.repository:jar:2.6.200
[DEBUG]   Included: org.bouncycastle:bcprov-jdk18on:jar:1.71
[DEBUG]   Included: org.bouncycastle:bcpg-jdk18on:jar:1.71
[DEBUG]   Included: org.eclipse.platform:org.eclipse.core.jobs:jar:3.13.100
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.preferences:jar:3.10.100
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.p2.core:jar:2.9.200
[DEBUG]   Included: org.eclipse.platform:org.eclipse.core.runtime:jar:3.26.0
[DEBUG]   Included: org.eclipse.platform:org.eclipse.core.contenttype:jar:3.8.200
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.app:jar:1.6.200
[DEBUG]   Included: org.eclipse.platform:org.eclipse.equinox.security:jar:1.3.1000
[DEBUG]   Included: org.eclipse.platform:org.eclipse.osgi:jar:3.18.0
[DEBUG]   Included: org.osgi:org.osgi.service.prefs:jar:1.1.2
[DEBUG]   Included: org.osgi:osgi.annotation:jar:8.0.1
[DEBUG] Configuring mojo org.eclipse.tycho:tycho-gpg-plugin:3.0.0:sign-p2-artifacts from plugin realm ClassRealm[plugin>org.eclipse.tycho:tycho-gpg-plugin:3.0.0, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@42110406]
[DEBUG] Configuring mojo 'org.eclipse.tycho:tycho-gpg-plugin:3.0.0:sign-p2-artifacts' with basic configurator -->
[DEBUG]   (f) addPublicKeyToRepo = true
[DEBUG]   (f) addPublicKeysToArtifacts = true
[DEBUG]   (f) defaultKeyring = true
[DEBUG]   (f) interactive = true
[DEBUG]   (f) passphraseServerId = gpg.passphrase
[DEBUG]   (f) project = MavenProject: org.apache.sling.ide:org.apache.sling.ide.p2update:1.2.3-SNAPSHOT @ /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/pom.xml
[DEBUG]   (f) repository = /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository
[DEBUG]   (f) settings = org.apache.maven.execution.SettingsAdapter@5b1ec7a6
[DEBUG]   (f) skipIfJarsigned = true
[DEBUG]   (f) useAgent = true
[DEBUG] -- end configuration --
[INFO] Expanding /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository/artifacts.xml.xz to /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository/artifacts.xml
[DEBUG] Expanding: /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository/artifacts.jar into /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository
[DEBUG] expand complete
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] PINENTRY_LAUNCHED 12770 mac 1.1.1 - xterm-256color - - 501/20 0
[GNUPG:] SIG_CREATED D 1 8 00 1669046689 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046690 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046691 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[DEBUG] 2.2.40
gpg: using "1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7" as default secret key for signing
[GNUPG:] KEY_CONSIDERED 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7 2
[GNUPG:] BEGIN_SIGNING H8
[GNUPG:] SIG_CREATED D 1 8 00 1669046691 1AFBC35D645EB43A91E382BF8CC10D97B7FE12A7
[INFO] Building zip: /Users/konradwindszus/git/sling/sling-ide-tooling/eclipse/p2update/target/repository/artifacts.jar
[DEBUG] adding entry artifacts.xml
[INFO]
@laeubi
Copy link
Member

laeubi commented Nov 21, 2022

How do you checked it is incorrect?

Also consider the following bugs:

@kwin
Copy link
Contributor Author

kwin commented Nov 21, 2022 •
edited
Loading

It seems that indeed all public keys are exported instead only the one from the used key pair:

tycho/tycho-gpg-plugin/src/main/java/org/apache/maven/plugins/gpg/ProxySignerWithPublicKeyAccess.java

Line 35 in 80983d5

public String getPublicKeys() throws MojoExecutionException {
, so indeed is related to #948 (but in this case for another mojo).

@kwin kwin mentioned this issue Nov 21, 2022
Merged
kwin added a commit to kwin/tycho that referenced this issue Nov 21, 2022
@kwin
Only export public key of default keypair
1b7870f 
This closes eclipse-tycho#1706
kwin added a commit to kwin/tycho that referenced this issue Nov 21, 2022
@kwin
Only export public key of default keypair
161e517 
This closes eclipse-tycho#1706
@kwin kwin mentioned this issue Nov 21, 2022
Closed
kwin added a commit to kwin/tycho that referenced this issue Nov 21, 2022
@kwin
Only export public key of default keypair
516a0c6 
This closes eclipse-tycho#1706
mickaelistria pushed a commit that referenced this issue Nov 22, 2022
@kwin @mickaelistria
Only export public key of default keypair
3c2c8ac 
This closes #1706
@laeubi laeubi added this to the 4.0 milestone Jun 24, 2023
kwin added a commit to apache/sling-ide-tooling that referenced this issue Oct 20, 2023
@kwin
Remove workaround for not including GPG public keys
34f5143 
eclipse-tycho/tycho#1706 is fixed in Tycho 4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
4.0
Development

Successfully merging a pull request may close this issue.

Only export public key of default keypair kwin/tycho
2 participants
@kwin @laeubi