apache / apache/maven-gpg-plugin

[MGPG-137] Un-deprecate passphraseServerId

Open
#281 9 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
31
Forks
27
Avg merge
4h 44m
Merged PRs (30d)
4

Description

**[Lenny Primak](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=lprimak)** opened **[MGPG-137](https://issues.apache.org/jira/browse/MGPG-137?redirect=false)** and commented

IMHO this parameter has been deprecated in error.

It is used to referenced the "server" field in settings.xml, where passphrases are stored in an encrypted fashion. This is actually safer than setting clear-text passwords in environment variables in practice.

---

**Affects:** 3.2.5

**Issue Links:**
- [MGPG-105](https://issues.apache.org/jira/browse/MGPG-105) Stop propagating bad practices; but allow for "compat mode"

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the handling and documentation for the passphraseServerId parameter in the Maven GPG plugin. Read the related compatibility behavior and issue MGPG-105 before determining the affected code and tests. Done means the parameter is no longer deprecated while preserving encrypted passphrase lookup through settings.xml.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.