<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<base href="x-msg://3/">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1074475168;
mso-list-type:hybrid;
mso-list-template-ids:1821638880 1977256734 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:20.4pt;
text-indent:-.25in;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
slf4j-user-bounces@qos.ch [mailto:slf4j-user-bounces@qos.ch] <b>On Behalf Of </b>Joern
Huxhorn<br>
<b>Sent:</b> Saturday, May 08, 2010 1:40 PM<br>
<b>To:</b> User list for the slf4j project<br>
<b>Subject:</b> Re: [slf4j-user] Signatures for verifying Slf4j<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<p class=MsoNormal>On 08.05.2010, at 20:08, Jeff Jensen wrote:<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
<br>
<o:p></o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Great! Glad the reply helped you and it works for you
(hopefully Ceki will do same :-). (note it is a Sonatype article, not mine!)</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>Ah, ok, I thought you wrote it and were one of them...<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
<br>
<o:p></o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Regarding the plugin property names, yes it is a little
misleading with the short name given in the table (it’s actually the
property name in the Java file). The “Parameter Details”
section lists the full property name expression to use; hopefully you discovered
that quickly!</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thanks for the gpg2 info. I added a little doc note from
your statements:</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a
href="http://svn.apache.org/viewvc/maven/plugins/trunk/maven-gpg-plugin/src/main/java/org/apache/maven/plugin/gpg/AbstractGpgMojo.java?view=diff&r1=942420&r2=908968&diff_format=u">http://svn.apache.org/viewvc/maven/plugins/trunk/maven-gpg-plugin/src/main/java/org/apache/maven/plugin/gpg/AbstractGpgMojo.java?view=diff&r1=942420&r2=908968&diff_format=u</a></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Also, you shouldn’t need the gpg plugin defined in
<dependencyManagement> as child modules can call profiles of
parent. I have only defined the gpg plugin in the profile section.</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>It's actually not in dependencyManagement but in
pluginManagement. I keep all plugin versions there in an attempt of keeping
some structure in the file. This has the effect that I don't have to define a
version at the place I'm referring to the plugin but still have it well-defined
at a specific version.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>I was fooled more than once by a failing build caused by a
suddenly updated plugin...<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
<span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Ugh,
not sure how I misread that!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Yes, excellent practice with pluginManagement. I define
the version in the parent using a property for each version, and place the dependency
in plugin/dependency Management too. The property approach is only one
step further to help with artifacts that use the same version number, e.g. a
bunch of the Spring ones, to ensure I upgrade correctly with only one change.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Side note - I hadn’t looked at Lilith for awhile as it
didn’t support direct log file use. Very happy to see
“…to support writing of Lilith logfiles using Logback
FileAppender” added! I will change the appender, try it, and
hopefully roll out Lilith for the team. (hmm, sidetracked looking for
docs…)</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal>Are you looking for Lilith docs? That's still somewhat
lacking, I'm afraid.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>Most of the documentation is contained in the help of Lilith
itself at the moment. Changing that is still on my agenda :p<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Yeah, I scoured the websites looking for “doc”
link. I then looked at files and found readme, but no config info.
Then wondered if docs were in the dist, so downloaded and looked. Then
ran it and found the help menu </span><span style='font-size:11.0pt;font-family:
Wingdings;color:#1F497D'>J</span><span style='font-size:11.0pt;font-family:
"Calibri","sans-serif";color:#1F497D'>. Nice easy example in there!
Thanks! Very cool. I have already added it as a second appender (I
think it would be good to have the human readable one too; we’ll see) and
experimenting.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
</div>
<div>
<p class=MsoNormal>I hope you like it. Please let me know if you have
suggestions.<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Very cool – indeed I do (that’s some fantastic
searching and filtering). I tried using some Eclipse plugins for log files
and haven’t been satisfied (actually, they are painful). I can see Lilith
becoming well used by us/my future customers! </span><span
style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>J</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>
Very glad you added the Lilith appender…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>My immediate thoughts are:<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Add a note on the site stating where config info/doc is (the
online help file!).<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Usability nit: restarting doesn’t restore prior column
widths; can’t double-click the line between column headers to auto-size.
Ah ha! Just discovered save layout… nice! (nevermind!)<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Usability: A recent files list (we have at least 6 in different
locations, so would be easy way to open them after restart). Possibly a
pref for reopen same files as when last ran?<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hmm, this would be great as an Eclipse view to have on same
screen (to replace using Console)… :-D But not necessary.
(oh, just noticed IDEA one… must be what you use! ;-)<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Adjust font size? (bottom detail pane is a bit small on my
1920x1200).<o:p></o:p></span></p>
<p class=MsoListParagraph style='margin-left:20.4pt;text-indent:-.25in;
mso-list:l0 level1 lfo1'><![if !supportLists]><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><span style='mso-list:Ignore'>-<span
style='font:7.0pt "Times New Roman"'>
</span></span></span><![endif]><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Do you deploy the Maven site anywhere? You have good info
and reports configured (changes, etc.), would be good to publish it. This
could be the easy way for you to solve issue #36 (create Lilith site)! </span><span
style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>J</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Thanks again!</span><br>
<br>
<o:p></o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in;
border-width:initial;border-color:initial'>
<div>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
class=apple-converted-space><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> </span></span><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Joern Huxhorn
[mailto:jhuxhorn@googlemail.com]<span class=apple-converted-space> </span><br>
<b>Sent:</b><span class=apple-converted-space> </span>Saturday, May 08,
2010 10:15 AM<br>
<b>To:</b><span class=apple-converted-space> </span>User list for the
slf4j project<br>
<b>Cc:</b><span class=apple-converted-space> </span>Jeff Jensen<br>
<b>Subject:</b><span class=apple-converted-space> </span>Re: [slf4j-user]
Signatures for verifying Slf4j</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
<div>
<div>
<p class=MsoNormal>Hi Jeff,<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>thank you very much for this information and your article! I
wasn't aware of this plugin.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>I just changed my build process for Lilith accordingly.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>See <a
href="http://github.com/huxi/lilith/commit/c2689ee57b263c6a2cb6241547a991703354bc6f">http://github.com/huxi/lilith/commit/c2689ee57b263c6a2cb6241547a991703354bc6f</a><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>I had to jump through some loops, though, since I have gpg2
instead of gpg:<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>The following two properties had to be added to my pom:<o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal><gpg.useagent>true</gpg.useagent><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><gpg.keyname>740A1840</gpg.keyname><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>The first one makes sure that gpg isn't complaining about an
invalid option (--no-use-agent was removed in gpg2) and doesn't ask for a
passphrase anymore.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>This was quite tricky since the documentation of
maven-gpg-plugin says that it's called useAgent, which it isn't!<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>The second one selects the correct key used for the
signature - which is a good idea if you have more than one.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>I wanted to comment on your article but, unfortunately,
comments are disabled.<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>Cheers,<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>Joern.<o:p></o:p></p>
</div>
</div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class=MsoNormal>On 08.05.2010, at 03:23, Jeff Jensen wrote:<o:p></o:p></p>
</div>
</div>
<div>
<p class=MsoNormal><br>
<br>
<br>
<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>It is best if the artifacts are signed. Sometime in the
near future, Central/Nexus will not accept artifacts without being signed.</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>This would prove the source for you more than the hashes.</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Ceki: you should start signing the release artifacts. It
is very easy - I’ve done it already on a few products and Sonatype has a
very good page describing how. Maven will do it automatically for you:</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a
href="http://www.sonatype.com/people/2010/01/how-to-generate-pgp-signatures-with-maven">http://www.sonatype.com/people/2010/01/how-to-generate-pgp-signatures-with-maven</a></span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><o:p></o:p></p>
</div>
</div>
<div>
<div style='border:none;border-top:solid windowtext 3.0pt;padding:3.0pt 0in 0in 0in;
border-width:initial;border-color:initial;border-width:initial;border-color:
initial;z-index:auto'>
<div>
<div>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
class=apple-converted-space><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> </span></span><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><a
href="mailto:slf4j-user-bounces@qos.ch">slf4j-user-bounces@qos.ch</a><span
class=apple-converted-space> </span>[mailto:slf4j-user-bounces@qos.ch]<span
class=apple-converted-space> </span><b>On Behalf Of<span
class=apple-converted-space> </span></b>Joern Huxhorn<br>
<b>Sent:</b><span class=apple-converted-space> </span>Friday, May 07, 2010
3:50 AM<br>
<b>To:</b><span class=apple-converted-space> </span>User list for the
slf4j project<br>
<b>Subject:</b><span class=apple-converted-space> </span>Re: [slf4j-user]
Signatures for verifying Slf4j</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>One solution could be the use of signed tags for SLF4J and
Logback.<o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal>That way it would be possible to pull the git repository,
check the signature of the tag and build SLF4J and Logback yourself afterwards.<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal>I think the MD5 and SHA1 of Maven repository are merely a
way to prevent corrupted files, not an actual security feature.<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal>Cheers,<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal>Joern.<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class=MsoNormal>On 07.05.2010, at 09:26, Elisha Ebenezer wrote:<o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<p class=MsoNormal><br>
<br>
<br>
<br>
<o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class=MsoNormal>Hi Ceki,<br>
I'm trying to push to use Slf4j and logback in our project and my company
wants me to get the MD5 or SHA1 hashes or the code-signing certs to verify the
integrity of downloaded files.<br>
<br>
Though<span class=apple-converted-space> </span><a
href="http://repo1.maven.org/">repo1.maven.org</a><span
class=apple-converted-space> </span>site provides the hashes, we are not
sure whether the war and the hash are uploaded by genuine party or not.<br>
<br>
As you are the owner of the project, I request you to kindly publish the hashes
or certs on website's download page.. which can be cross-checked with the
downloaded war and/or also with the maven repository.<br>
<br>
Kindly do the needful and oblige.<br>
<br>
Thanks,<br>
Elisha Ebenezer. _______________________________________________<br>
slf4j-user mailing list<br>
<a href="mailto:slf4j-user@qos.ch">slf4j-user@qos.ch</a><br>
<a href="http://qos.ch/mailman/listinfo/slf4j-user">http://qos.ch/mailman/listinfo/slf4j-user</a><o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<div>
<p class=MsoNormal>_______________________________________________<br>
slf4j-user mailing list<br>
<a href="mailto:slf4j-user@qos.ch">slf4j-user@qos.ch</a><br>
<a href="http://qos.ch/mailman/listinfo/slf4j-user">http://qos.ch/mailman/listinfo/slf4j-user</a><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal> <o:p></o:p></p>
</div>
</div>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'>_______________________________________________<br>
slf4j-user mailing list<br>
<a href="mailto:slf4j-user@qos.ch">slf4j-user@qos.ch</a><br>
<a href="http://qos.ch/mailman/listinfo/slf4j-user">http://qos.ch/mailman/listinfo/slf4j-user</a><o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>