[SCM-710] Use of encrypted password in pom.xml confiuration is ignored

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Auto Closed
• Component/s: maven-plugin
• Assignee: Unassigned
• Reporter: Eddie Webb
• Created: 10/Jan/13 15:01
• Updated: 12/Jan/16 20:12
• Resolved: 12/Jan/16 20:12

Description

THe docs for this plugin say I can use encrypted passwords just like we do for the release plugin.

It does not seem to support the same <project.scm.id>non-hostname-id</project.scm.id> that the release plugin does, so I included the username and encrypted password directory in the plugin config.

...
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-scm-plugin</artifactId>
        <version>1.8.1</version>
        <configuration>
          <username>username</username>
          <password>{EncycptedStringGeneratedFromMvnPassword=}</password>
        </configuration>
      </plugin>
    </plugins>
...

But the SCM fails with authentication issue, and the SVN logs determine that no user ID is sent.

If I instead include the hostname as a server ID in settings.xml, or include these values on the command line, in both cases it invokes a 500 from the application server.

mvn scm:checkout -Pforge -Dusername=myuser -Dpassword=

{EncycptedStringGeneratedFromMvnPassword=}

svn: Server sent unexpected return value (500 Internal Server Error) in response to OPTIONS request for https://my-svn

This 500 can be duplicated in a browser by passing the un-encrypted string

{foo=}

.

summary

regardless of where I place the encruypted password it is either ignored, or not decrypted before being sent to the webserver.

Can you please document an example of how to use the encrypted passwords, or support the same approach as the release plugin.
http://jira.codehaus.org/browse/MRELEASE-420