Refresh downloaded keys from key server #284
Labels
enhancement
New feature or request.
good first issue
Good for newcomers.
hacktoberfest
to grab
Ready to do and to grab by those willing.
Comments
slawekjaranowski
changed the title
slawekjaranowski
added
good first issue
pzygielo
pushed a commit
to pzygielo/pgpverify-maven-plugin
that referenced
this issue
May 31, 2024
Upgrades * guava to 31.1-jre (was 30.1-jre) * mockito-core to 4.11.0 (was 4.8.1) * plexus-utils to 3.5.1 (was 3.5.0) * maven deps (used in demos only) to 3.8.7 (was 3.8.4) and add a comment to keep in sync with maven build --- https://issues.apache.org/jira/browse/MRESOLVER-358
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently downloaded key is stored in cache forever.
Key can be changed by author and new version can be uploaded to kay server.
So we should have possibility to refresh key in cache.
We can add plugin parameters like:
pgpKeysCacheMaxDayswith default value 90.Behavior
We will check key age during key access - if key in local storage is older than given days should be removed and download again from key server.
We don't check keys age of rest keys in cache storage that aren't used.
The text was updated successfully, but these errors were encountered: