Recently I followed the apache advice to update my code signing key to 4096 bits, see http://www.apache.org/dev/openpgp.html As part of that effort I installed MacGPG2-2.0.12 as the most likely version of gpg 2.0.12 for a mac. Although documentation seems a bit sparse I think I started the gpg agent as well.

Running a release I see a message at every signing opportunity

gpg: WARNING: "--no-use-agent" is an obsolete option - it has no effect

You need a passphrase to unlock the secret key for
user: "David Jencks (CODE SIGNING KEY) <djen...@apache.org>"
4096-bit RSA key, ID A2F9E313, created 2009-11-25

and every hour or so (??) a dialog box pops up for me to supply the passphrase (it was a long build). This never happened before I updated gpg, the passphrase in my settings.xml was used.

We are using the apache 6 parent pom which specifies the 1.0-alpha-4 version of this plugin.

Anyone have an idea what is going on?

thanks
david jencks


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Reply via email to