[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
Re: [jgit-dev] Tag Signing?
|
2011/5/25 Nick Palmer <nick@xxxxxxxxxxxxx>:
> Hey All,
>
> Looking at the TagCommand I see that signing is not yet supported.
>
> Are there plans to add (possibly optional) support for this, or are you trying to avoid the dependency?
>
> Integration with Bouncy Castle's OpenGPG implementation should do the trick provided options are carefully chosen to match GnuPG. I would consider contributing patches if this is something that would be considered desirable.
We have a pending CQ for Bouncy Castle [1], if we get approval to use that
we should go this path. We would be happy to see your contributions on
this topic. As long as the CQ isn't approved we can't submit a bouncy castle
based implementation.
Another possibility would be to enable use of an external GPG implementation
by forking another process similar to what we have to enable using an
external SSH implementation (see jgit commit 22e720ce).
[1] https://dev.eclipse.org/ipzilla/show_bug.cgi?id=5136
--
Matthias
