Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[platform-dev] Documentation about pgp signing of Eclipse plugins

Hi,

in context of expired spotbugs certificate (see https://github.com/spotbugs/spotbugs/issues/2008) 

I'm looking for pointers (wiki/blog/help page) about how one can "sign" Eclipse bundles with pgp? 

Google finds few bugs but no explanation to following questions :

- prerequisites (which Eclipse version supports that)
- build requirements (which tooling needed, on which platform etc)
- instructions for signing itself (command line etc)
- which side effects ot has on compatibility with old Eclipse platforms (can pgp signed bundle be installed on older Eclipse that doesn't know anything about pgp)

These below seem to be related but don't give answers to questions above:
https://bugs.eclipse.org/bugs/show_bug.cgi?id=576895
https://bugs.eclipse.org/bugs/show_bug.cgi?id=572816

Is there any official documentation available ?
--
Kind regards,
Andrey Loskutov

https://www.eclipse.org/user/aloskutov
Спасение утопающих - дело рук самих утопающих


Back to the top