Re: Java API of libidn

[Simon Josefsson]

> Hi,
> 
> Found it, and was able to use them. Sadly, my earlier comment on
> being able to get away with not meeting requirements and only
> supplying the bare minimum of having a signed pom file, and a signed
> jar file does not hold true. We need more (and what we do have needs
> additional information).

Bummer!

> I'll try to restructure the Java project a little to meet to above
> needs (as well as address other issues I mentioned earlier).

Great.  You could pull out the Java Libidn source code into a separate
git repository with its own release schedule etc if this makes things
easier.  If that works well, we could remove the current Java code and
have the other project supersede that part of the libidn-*.tar.gz
archive.  This would probably make things easier anyway.

> I just tried to subscribe to you over XMPP - that might be a better
> venue for discussion about some of the details than this mailinglist.
> If you would be so kind to accept my subscription request... :)

I'm online now at address@hidden but didn't see any request.  Try
again :-)

/Simon

> 
>  - Guus
> 
> On 22 July 2016 at 11:24, Simon Josefsson <address@hidden> wrote:
> 
> > Hi Guus,
> >
> > Sorry, I thought they were uploaded for all releases.  I now
> > uploaded signed JAR+POM for 1.33 manually.  Check again!
> >
> > /Simon
> >
> > > Hi Simon,
> > >
> > > Where exactly on the FTP server are the signed JAR files? In
> > > http://ftp.gnu.org/gnu/libidn/ there are lots of signed archives,
> > > but no JAR files specifically (with the exception of version
> > > 1.28). The archives themselves do appear to contain the JAR file,
> > > but no JAR file signature.
> > >
> > > Regards,
> > >
> > >   Guus
> > >
> > >
> > > On 20 July 2016 at 19:18, Simon Josefsson <address@hidden>
> > > wrote:
> > >
> > > > Guus der Kinderen <address@hidden> writes:
> > > >
> > > > > Hi Simon,
> > > > >
> > > > > What we appear to need are PGP-signed artifacts. I noticed
> > > > > that you
> > > > already
> > > > > published a key, so it's probably best to re-use that.
> > > > >
> > > > > I tried, but failed, to reproduce the Java build (I've just
> > > > > started a different thread on this mailing list on the
> > > > > subject). As libidn does not use Maven to do the actual
> > > > > building, getting the artifacts in the exact right format is
> > > > > a bit tricky.
> > > >
> > > > Hi Guus.  Thanks for your work here.
> > > >
> > > > > Although more artifacts (javadocs, sources) are desired, I
> > > > > found an
> > > > obscure
> > > > > reference that hinted that we could get away with the bare
> > > > > minimum of having a signed pom file, and a signed jar file.
> > > > > Simon, could you sign
> > > > both
> > > > > files (from the .32 release) and make those available to me
> > > > > please? I'll see if I can make things work with just those.
> > > >
> > > > The signed JAR files are available via ftp.gnu.org.  I'm
> > > > attaching a 1.32 *.pom file and its signature.  Can you make
> > > > something work with this?
> > > >
> > > > Getting the build process up to speed would be good too...
> > > >
> > > > /Simon
> > > >
> > > > -----BEGIN PGP MESSAGE-----
> > > > Version: GnuPG v1
> > > >
> > > > owG1V31sFEUU75XPO4tFDBDlI5NLBFLbnesHiM12iSkfkrZA5EsiQuZ2565D9nY3
> > > > M7s9WjFqAiqaUBI/EiBA/AMTDUQxxkQMIWhVEJXwlwED0URFrf+IhhgM6Ozs7DHX
> > > > 3mHQSAK5efPem9/7ze+9WXZPGlMzMfHsHU990PLHXfsTZ4azNesH31mnL9pasEEf
> > > > poy4Tke6WcukAXZM1yJOviO9ds3SpoXpRUZK96i7BZs+4N4O60j3+r7XDmEB9WFH
> > > > Qx4ye7Hm0jxctbIHtmkZniUF4j8ipH0rI6WwYrGoFVtFQEsm0wwf7elezTMUUBNx
> > > > mI8cE6vhjLQzsdvtmsgXMP/xeFDNQxia+to2ZzZntK3MShv8JL3gWtheF5FgiAQ6
> > > > LLOFTnnqBt5yy+BptLwTaMTBvg5ja+iBqE9yyPT50iZZYjk6VEyhh4MK2Fi2Yi1Y
> > > > vngF6CZZimi/DoU13Jb3YDRrrS06jFepcMvCzKTE8yUaAMIs3eIUQBhAIBfYdj+w
> > > > XDMoYMfHFiAFz8bhb0EacHPA78VgtU/51XoUe40izarA6efXjQFyrBDVQ4B52CQ5
> > > > EnHNNHnIXAa8gHouw+FxvhupBIscYaiFRRbCj6aOCEU2GeAwLLeAiAPCGpkWVgLL
> > > > SgktXFwe5kRhFpUWq03LBsS2NOYG1MRLpCoNIUod3tInShPdvukWPGJjKn04ufN1
> > > > WHmrYpiPaB77FcPkVuXTet3iekQdDocZPg3w6ENVj6o5FmN+WdFlVE+jOgmOVUpD
> > > > Q0BtQ+m+UL9hOzA35xcRxTDSK9Rh6CgiCG9DcUcbMKIG71OuyHKbcLOJiR1Wujm5
> > > > NGT/3hR8N2YMU7AMO5gim8suy125toR7PIBAK29dlwIbcRXd7AuRqUoF8fmlH1qv
> > > > X7BlHTLUIoyrPhsIerjyXa5B1RRBhwr20kLSx8yC9DJdx+GyC8O4sT1PfPEXQv6v
> > > > xlAfchzUq6ALadX4ng6VyNTIiioGc2MRZ+Eir0NNIwvTocAU/uK+yCEDSEkd065y
> > > > WI1BJWV5pmjseNixeK+XmlM19scmYY5HIVemlnfdvI21cCZoOeJY2SDPyoZlKUqZ
> > > > kLx8N5pWbOTkLLnHQ7GFT+lmZUYqLszk2jd4B/QRC1shUeE6Bg9V9JUqSiqlbAkc
> > > > og75ZDlgua1CTSoY27RmFWKyhM3HzP9PuBSK8wHXTXWIcns0xJ/kU9M2gsj/B6XJ
> > > > XwMv7OlqOEsO1cjMaPObqPnvkSqG0lQUb0f85thBnn9+lOKj9U1hlb3/8osimsQy
> > > > soK81QKjL494ajdFQZVlXqq5tYLE+WyXyEYiTd4ezJNz45BRKFlAcY5QXBFlckQf
> > > > cgXdCqW6YtGYkbTLpz/H+VBojwzR7RJFF0TqQQYny4rn8cmkSkW8fZulxWF8VudI
> > > > PqByEiZFcv762YGFmVwLR2kzGhpgZ4S0QdsiOi7ekcFQjY45GnWMSlyynEkWlQ8V
> > > > zcqHPuJLWYTqLn0gGamdiZljaxITa8aPqw0/+WtSycnx/wP66yfcmHPy5V8/7un7
> > > > rKfr6Qfs3demHqzbXnd3YdbPv5+euf3qL3T7/IZrueM986ZmrTE7zRsvdB/+qvHL
> > > > dW3s2OWL13flTn8/uWvwApl06gCobdw159zVcfV7ph06d/RDcG3Vyuz1L+7dqE1L
> > > > 7339/OwLJzbUTziauLP+240vvUaH2ve8+f7Yufd9Ojz87uPvzXumvuXs2fQM94cX
> > > > 17xV13wxv7Lx8F/onunHhwa++fzBJ47Nfv7S+NpZ5t6uoVfe3vDw+qHfDvy4bWni
> > > > /s4pHw08Nua506/uGIRfP7lpxZSBT1K5BUsu1564YpN9+pFtwaELb8zYNHiq7vyf
> > > > tDNx5cSCg50HwKUZq79beGT6zEf2o32p4R3nz/wN
> > > > =BG7g
> > > > -----END PGP MESSAGE-----
> > > >
> > > >
> >
> >

pgpMtNcy0niJu.pgp
Description: OpenPGP digital signatur