signing doesn't work for unknown reason about gradle-maven-publish-plugin

[Jawnnypoo]

Seeing this as well. (Using a config very similar to https://github.com/coil-kt/coil if that helps)

[Jawnnypoo]

@vanniktech It would be good in my opinion to add to the README instructions about signing and potentially how to disable it, since it is required by mavenCentral, but some might be using this lib just to deploy to a private maven instances that doesn't require signing.

[christian-draeger]

ok i finally managed to publish by adding the following to my gradle.properies file:

signing.keyId=A1B2C3D4
signing.password=somePassword
signing.secretKeyRingFile=/Users/christiandrager/.gnupg/secring.gpg

to get tthe signing key id run:
gpg --list-secret-keys --keyid-format SHORT

the 8 characters that are following after ssb rsa2048/ are your keys id

If you started out with GnuPG 2.1 instead of upgrading from earlier versions, creating a secring.gpg file manually appears to be the proper workaround:

gpg --export-secret-keys >~/.gnupg/secring.gpg

But anyway i don't think its needed to add the properties usually? at least i can not find some instructions to do that in the plugins documentation

[vanniktech]

Oh yes those 3 gradle properties are required. Want to submit a README update?

[vanniktech]

Which version of the plugin are you using? I haven't had any problems releasing with the current version.

[christian-draeger]

Hey, I'm using version 0.8.0

[Jawnnypoo]

@christian-draeger What command did you use to generate that .gpg file? Right now, I am using gpg --gen-key but my file does not end up named the same as yours, so I am wondering if there is some other configuration I need.

[Jawnnypoo]

I ended up having to do this step too: gradle/gradle#888 (comment) to properly export to secring.gpg and everything seems to be working now! Thanks!

[christian-draeger]

I ended up having to do this step too: gradle/gradle#888 (comment) to properly export to secring.gpg and everything seems to be working now! Thanks!

Ah, yeah did that as well before to create securing.gpg file
Forgot to mention that