

Sign Library Using GPG via Android StudioĪ GPG key is a cryptic key format which will be used to sign our release artifact on Maven Central to create a GPG key. Once in the profile, click on the summary’s dropdown and select User Token. You can directly provide the password, but for security, you can obtain a token for it if you go to profile in Nexus UI and use it instead. OssrhPassword: The is the same as your Jira password, which is also the password for Nexus UI.

You can directly provide the username, but for security, you can obtain a token for it if you go to profile in Nexus UI and use it instead. OssrhUsername: The is the same as your Jira username, which is also the username for Nexus UI. cretKeyRingFile: The path to your key file, for instance, /Users/user/keys/secring.gpg, or just secring.gpg, the name of the key file if it’s placed at the root of your library’s module. Signing.password: The passphrase you created when creating this key. You can also view this key in the GPG keychain app. Signing.keyId: This is formed by the last eight digits of your. These parameters are used to authenticate and publish to Maven Central, and they are to be kept secure and private. (Consider adding this file to Git without signing parameters.) Signing parameters Note: During upload, your library’s information will be picked up from this file.

Substitute with your library name, as in the above file. GROUP: Your group id POM_ARTIFACT_ID: Your library id (The library’s name probably) POM_URL: The link to your library on GitHub POM_SCM_URL: Same as POM_URL POM_SCM_CONNECTION: Same as POM_SCM_CONNECTION Most of the terms in the above file are self-explanatory, but below are the ones to be aware of:
