apache / apache/maven-gpg-plugin
[MGPG-93] .asc files are written to a non-existent output directory
- Dominant language
- Java
- Stars
- 31
- Forks
- 27
- Avg merge
- 4h 44m
- Merged PRs (30d)
- 4
Description
**[Pawel Veselov](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=pveselov)** opened **[MGPG-93](https://issues.apache.org/jira/browse/MGPG-93?redirect=false)** and commented
I think this is an instance of MGPG-44, but for a different assembly.
Attempting to sign .war files created in non-standard location causes build to fail:
```
$ mvn package gpg:sign
[INFO] --- maven-gpg-plugin:3.0.1:sign (default-cli) @ b ---
gpg: using "856916A457583513" as default secret key for signing
gpg: can't create '/home/vps/tmp/gpg-test/mod/target/gpg/../artifacts/b-1-SNAPSHOT.war.asc': No such file or directory
gpg: signing failed: No such file or directory
```
Structure to reproduce: [^gpg-test.tar.gz]
This can be worked around with using `ascDirectory`, but I figured it should work without it.
---
**Affects:** 3.0.1
**Attachments:**
- [gpg-test.tar.gz](https://issues.apache.org/jira/secure/attachment/13053931/gpg-test.tar.gz) (_820 bytes_)
Contributor guide
No contributing guide indexed for this repository
Research direction
Unpack gpg-test.tar.gz and reproduce the failure with `mvn package gpg:sign` against the non-standard WAR location. Trace how the signing output path is selected, including the `ascDirectory` workaround; done means the WAR signs successfully without requiring `ascDirectory`.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100