[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
Re: [jgit-dev] Tag Signing?
|
On Wed, May 25, 2011 at 8:09 AM, Matthias Sohn
<matthias.sohn@xxxxxxxxxxxxxx> wrote:
> We have a pending CQ for Bouncy Castle [1], if we get approval to use that
> we should go this path. We would be happy to see your contributions on
> this topic. As long as the CQ isn't approved we can't submit a bouncy castle
> based implementation.
Bouncycastle has some interesting provenance issues that has caused
the Eclipse IP team some grief in the past. I hope when they look at
it again, it will be less of an issue this time around. However, this
won't be done until after Indigo due to the IP backlog (hence, post
EGit/JGit 1.0)
> Another possibility would be to enable use of an external GPG implementation
> by forking another process similar to what we have to enable using an
> external SSH implementation (see jgit commit 22e720ce).
This seems like the best approach for now if people want this
functionality sooner than later.
--
Cheers,
Chris Aniszczyk
http://aniszczyk.org
+1 512 961 6719
