plugins {
    id 'java'
    id 'signing'
}

group = 'gradle'
version = '1.0'

// tag::configure-signatory[]
signing {
    useGpgCmd()
    sign configurations.runtimeElements
}

 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

/**
 * PGP signing support.
 */

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.gradle.plugins.signing

import org.gradle.test.fixtures.AbstractProjectBuilderSpec

import java.nio.file.Files

abstract class SigningProjectSpec extends AbstractProjectBuilderSpec {

    static final DEFAULT_KEY_SET = "gradle"

    </plugin>
    <plugin id="java-library-distribution" description="Java Library Distribution Plugin"/>
    <plugin id="signing" description="Signing Plugin">
        <extends targetClass="org.gradle.api.Project" id="signing" extensionClass="org.gradle.plugins.signing.SigningExtension"/>
    </plugin>
    <plugin id="eclipse" description="Eclipse Plugin">

 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

/**
 * The signing plugin.
 */

 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

/**
 * The signing plugin signatory types.
 */

     * @return selected dialect
     */
    DialectVersion getSelectedDialect ();


    /**
     * 
     * @return whether the server has singing enabled
     */
    boolean isSigningEnabled ();


    /**
     * 
     * @return whether the server requires signing
     */
    boolean isSigningRequired ();


    /**
     * @return whether the server supports DFS
     */
    boolean isDFSSupported ();

  //
  // Valid values are:
  //  "signing",
  //  "digital signature",
  //  "content commitment",
  //  "key encipherment",
  //  "key agreement",
  //  "data encipherment",
  //  "cert sign",
  //  "crl sign",
  //  "encipher only",
  //  "decipher only",
  //  "any",
  //  "server auth",
  //  "client auth",
  //  "code signing",
  //  "email protection",
  //  "s/mime",

//   backward compat. Will be removed with the node-agent. sds-agent is calling NewCitadelClient directly, using
//   K8S root.

var (
	// LocalCertDir replaces the "cert-chain", "signing-cert" and "signing-key" flags in citadel - Istio installer is
	// requires a secret named "cacerts" with specific files inside.
	LocalCertDir = env.Register("ROOT_CA_DIR", "./etc/cacerts",
		"Location of a local or mounted CA root")

	//
	// Valid values are:
	//  "signing",
	//  "digital signature",
	//  "content commitment",
	//  "key encipherment",
	//  "key agreement",
	//  "data encipherment",
	//  "cert sign",
	//  "crl sign",
	//  "encipher only",
	//  "decipher only",
	//  "any",
	//  "server auth",
	//  "client auth",
	//  "code signing",
	//  "email protection",
	//  "s/mime",