apache / apache/maven-gpg-plugin
[MGPG-137] Un-deprecate passphraseServerId
- Dominant language
- Java
- Stars
- 31
- Forks
- 27
- Avg merge
- 4h 44m
- Merged PRs (30d)
- 4
Description
**[Lenny Primak](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=lprimak)** opened **[MGPG-137](https://issues.apache.org/jira/browse/MGPG-137?redirect=false)** and commented
IMHO this parameter has been deprecated in error.
It is used to referenced the "server" field in settings.xml, where passphrases are stored in an encrypted fashion. This is actually safer than setting clear-text passwords in environment variables in practice.
---
**Affects:** 3.2.5
**Issue Links:**
- [MGPG-105](https://issues.apache.org/jira/browse/MGPG-105) Stop propagating bad practices; but allow for "compat mode"
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the handling and documentation for the passphraseServerId parameter in the Maven GPG plugin. Read the related compatibility behavior and issue MGPG-105 before determining the affected code and tests. Done means the parameter is no longer deprecated while preserving encrypted passphrase lookup through settings.xml.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100