verisign.yaml

verification:
  # http response code
  errorHttpResponseCode: 400
  # When true the verification does not block/stop a deployment, false otherwise, default false
  nonBlockingMode: false
  #  Message which is added to the error response to help user resolve problem
  additionalErrorMessage: |
    Go to https://avast.com/display/xxx/Signing+JAVA+binaries+in+IDA+environment for more help.
  rpm:
    # rpm validation enabled
    enabled: true
    pgpKeyIds:
      - "xxxx"
  # for which extensions should be used JAR verification
  jar:
# config file for verisign properties - example and for dev purposes
    # jar validation enabled
    enabled: true
    # keystore settings
    keystore:
      path: 'c:\temp\signcert.p12'
      password: ''
      aliases:
        - 'avast-sign'
    # for which extensions should be used JAR verification jfrog-verisign
    extensions:
      - jar
      - aar

  paths:
    # paths with prefixed with virtual repos are expanded into local repos - eg. maven-local-virtual/.... is expanded to maven-local-x1/,maven-local-x2/,..
    expandVirtualReposToLocal: true

    # Whether the paths should be considered in case-sensitive manner jfrog-verisign
    caseSensitive: false

    # enable verification only for these Ant paths only, apply for all if empty/not defined
    # verification is applied only for both enabled & not ignored paths
#    enabledPath:
#      - 'maven-local/com/avast/android/**'

    # Ant path matching, see https://docs.spring.io/spring-framework/docs/current/javadoc-api/org/springframework/util/AntPathMatcher.html
    ignorePath:
      - '**/*-sources.jar'
      - '**/*-javadoc.jar'