leiningen icon indicating copy to clipboard operation
leiningen copied to clipboard

Published 20 hours ago • verified publisher icon technomancy

Implement in-process signing.

Open hypirion opened this issue 10 years ago • 2 comments

Shelling out for calling GPG leads to certain complications. In particular, this method does not work at all on Windows, and generates issues when the IO has been rebound, see #1080.

If it's possible to use a Clojure wrapper around a Java cryptography library, such as BouncyCastle, then that would be preferable.

hypirion avatar Oct 22 '13 13:10 hypirion

A result of this is that we're unable to detect keychains on systems. However, it's not hard to keep the current method as an option in the project map, and fall back to internal signing when we're unable to shell out/find GPG.

hypirion avatar Oct 22 '13 14:10 hypirion

It looks like we might be able to use this: https://github.com/greglook/clj-pgp

technomancy avatar May 02 '14 03:05 technomancy