#942 Remove use of nu.studer.credentials

Also switch to using gpg-cmd for signing

Author: mrotteveel

build-properties.gradle

@@ -45,9 +45,6 @@ if (ext.buildJava == 8 && ext.testJava != ext.buildJava) {
 ext.'version.simple' = "${project.'version.major'}.${project.'version.minor'}.${project.'version.revision'}".toString()
 ext.'version.maven' = "${project.'version.simple'}.${project.'maven.jdkversion'}${project.'version.tag'}".toString()
 
-ext.'signing.password' = credentials.forKey('signing.password')
-ext.centralPassword = credentials.forKey('centralPassword')
-
 ext.isReleaseVersion = provider {
     !version.endsWith("SNAPSHOT")
 }

build.gradle

@@ -28,7 +28,6 @@ import org.asciidoctor.gradle.jvm.AsciidoctorTask
 
 plugins {
     id 'java-library'
-    id 'nu.studer.credentials' version '3.0'
     id 'maven-publish'
     id 'signing'
     id 'org.asciidoctor.jvm.convert' version '4.0.5'

devdoc/publish.md

@@ -8,10 +8,11 @@ Publishing
 To publish to Maven use
 
 ```
-./gradlew clean dist assemble publish -PbuildProfile={8|11} -PcredentialsPassphrase=<credentials password>
+./gradlew clean dist assemble publish -PbuildProfile={8|11} -PcentralPassword=<value>
 ```
-Where `<credentials password>` is the password used to add the credentials (see
-also below).
+
+This command will prompt for you GPG key password if it's not already cached in
+your current session.
 
 The `assemble` task is not strictly necessary, but will also generate the `dist`
 zip and sign it.
@@ -27,23 +28,21 @@ To be able to deploy, you need the following:
 a `<homedir>/.gradle/gradle.properties` with the following properties:
 
 ```
-signing.keyId=<gpg key id>
-signing.secretKeyRingFile=<path to your secring.gpg> 
+signing.gnupg.keyName=<short keyid>
 
 centralUsername=<Central Portal usertoken name>
+# Only needed if you don't want to specify -PcentralPassword=... on commandline
+centralPassword=<your Central Portal usertoken password>
 ```
 
-See also [Gradle: The Signing Plugin](https://docs.gradle.org/current/userguide/signing_plugin.html).
-
-In addition, you need to set the following credentials
+(It's possible `signing.gnupg.keyName` also accepts long key-ids, we haven't checked.)
 
-```
-./gradlew addCredentials --key signing.password --value <your secret key password> -PcredentialsPassphrase=<credentials password> 
-./gradlew addCredentials --key centralPassword --value <your Central Portal usertoken password> -PcredentialsPassphrase=<credentials password> 
-```
+Make sure the file is only readable and writable by you (chmod 600). If the
+password contains backslashes, make sure to escape them by doubling. If the
+password contains characters not in ISO 8859-1, make sure to use a Java Unicode
+escape.
 
-See https://github.com/etiennestuder/gradle-credentials-plugin for details on
-credentials.
+See also [Gradle: The Signing Plugin](https://docs.gradle.org/current/userguide/signing_plugin.html).
 
 ## License Notice
 

publish.gradle

@@ -188,6 +188,7 @@ tasks.withType(PublishToMavenRepository).each {
 }
 
 signing {
+    useGpgCmd()
     required = { isReleaseVersion && gradle.taskGraph.hasTask(':publish') }
     sign publishing.publications.mavenJava
     sign dist