Affects Version/s: 3.1.0
Fix Version/s: 3.1.1
Environment:Maven 3.5.2, Java 8u151 (32-bit) as well as 9.0 (64-bit), Windows 10
1. Create a new directory
2. Add attached pom.xml (no other sources required to reproduce; in real world you would add some source that uses BouncyCastle lib, too).
3. Run mvn package
Maven hangs after
[INFO] Building jar: C:\Daten\Eigenes\svn\iota\hang\target\bug-1.0-SNAPSHOT-jar-with-dependencies.jar
, consuming one CPU core.
Maven builds a package containing no own source and the dependency (bouncycastle)
In maven local repository, edit the .jar file of BouncyCastle and remove the `META-INF\BC*` files. Then the package can be built again. So it seems to be caused somehow by verifying signed jar files.