Update release script with new gpg config (#202)

* update using new gpg version

* add more comments

* update descriptions and comments

Author: xiazhvera

aws-iot-device-sdk-java-samples/pom.xml

@@ -6,6 +6,7 @@
     <version>0.0.1-dev</version>
   </parent>
   <artifactId>aws-iot-device-sdk-java-samples</artifactId>
+  <name>${project.groupId}:${project.artifactId}</name>
   <dependencies>
     <dependency>
       <groupId>com.amazonaws</groupId>

aws-iot-device-sdk-java/pom.xml

@@ -6,6 +6,8 @@
     <version>0.0.1-dev</version>
   </parent>
   <artifactId>aws-iot-device-sdk-java</artifactId>
+  <name>${project.groupId}:${project.artifactId}</name>
+  <description>This SDK is now in maintenance mode and will not receive new features. For the latest functionality, please use aws-iot-device-sdk. The AWS IoT Device SDK for Java lets your device applications communicate with the AWS IoT Core service over MQTT. In addition to basic MQTT messaging, it includes built-in support for AWS IoT services such as Thing Shadows, Jobs, and Fleet Provisioning.</description>
   <dependencies>
     <dependency>
       <groupId>org.mockito</groupId>

codebuild/cd/promote-release.yml

@@ -1,5 +1,5 @@
 version: 0.2
-#this buildspec assumes the ubuntu 16.04:x64 image
+# Assumes this is running on the Ubuntu CodeBuild standard image.
 # This job is responsible for artifacting the JAR which will have all of the other shared libs stuffed
 # into it once all platforms are built and artifacted
 phases:
@@ -9,8 +9,10 @@ phases:
       - sudo apt-get update -y
       - sudo apt-get install openjdk-8-jdk-headless maven -y -f
       - sudo apt-get install jq -y
-      # need latest awscli for secretsmanager
-      - sudo pip3 install awscli --upgrade
+      - echo "\nBuild version data:"
+      - echo "\nJava Version:"; java -version
+      - echo "\nMaven Version:"; mvn --version
+      - echo "\n"
 
   pre_build:
     commands:
@@ -22,35 +24,38 @@ phases:
       - sed -i 's/0.0.1-dev/'"$PKG_VERSION"'/g' aws-iot-device-sdk-java/pom.xml
       - sed -i 's/0.0.1-dev/'"$PKG_VERSION"'/g' aws-iot-device-sdk-java-samples/pom.xml
       - sed -i 's/0.0.1-dev/'"$PKG_VERSION"'/g' aws-iot-device-sdk-java/src/main/java/com/amazonaws/services/iot/client/mqtt/AwsIotMqttConnection.java
-      # Get java v1 gpg files
-      - aws s3 cp --recursive s3://code-sharing-aws-crt/gpg-java-v1/ maven-gpg
-      # manully copy the maven-gpg in subfolder, since codeBuild does not set localRepository correctly
-      - cp -r maven-gpg aws-iot-device-sdk-java/maven-gpg
-      - cp -r maven-gpg aws-iot-device-sdk-java-samples/maven-gpg
+
       # install settings.xml to ~/.m2/settings.xml
       - mkdir -p $HOME/.m2
-      - aws s3 cp s3://code-sharing-aws-crt/iot-sdk-java-v1.settings.central.xml $HOME/.m2/settings.xml
+      - aws s3 cp s3://code-sharing-aws-crt/aws-iot-device-sdk.settings.token.xml $HOME/.m2/settings.xml
+
       - aws --query "SecretString" secretsmanager get-secret-value --secret-id Sonatype/JIRA/token/V1 > sonatype_secret
       - jq fromjson sonatype_secret > sonatype_json
       - export ST_PASSWORD=$(jq -r '.password' sonatype_json)
       - export ESCAPED_PASSWORD=$(printf '%s\n' "$ST_PASSWORD" | sed 's:[\\/&]:\\&:g')
       - export ST_USERNAME=$(jq -r '.username' sonatype_json)
+
       - aws --query "SecretString" secretsmanager get-secret-value --secret-id gpg/IoT/JAVA/V1 > gpg_secret
       - jq fromjson gpg_secret > gpg_json
-      - export GPG_PRINCIPAL=$(jq -r '.username' gpg_json)
       - export GPG_CREDENTIAL=$(jq -r '.password' gpg_json)
-      # Use the password from secret manager to update the settings
-      - sed -i 's/sonatype_Principal/'"$ST_USERNAME"'/g' $HOME/.m2/settings.xml
-      - sed -i 's/sonatype_Credential/'"$ESCAPED_PASSWORD"'/g' $HOME/.m2/settings.xml
-      - sed -i 's/gpg_Principal/'"$GPG_PRINCIPAL"'/g' $HOME/.m2/settings.xml
-      - sed -i 's/gpg_Credential/'"$GPG_CREDENTIAL"'/g' $HOME/.m2/settings.xml
 
+      # Use the username and password from secret manager to update the settings
+      - sed -i 's|token-username|'"$ST_USERNAME"'|g' $HOME/.m2/settings.xml
+      - sed -i 's|token-password|'"$ESCAPED_PASSWORD"'|g' $HOME/.m2/settings.xml
+
+      # for https://github.com/keybase/keybase-issues/issues/2798
+      - export GPG_TTY=$(tty)
+
+      - aws s3 cp s3://code-sharing-aws-crt/aws-iot-java-sdk.asc .
+      - gpg --batch --import aws-iot-java-sdk.asc
+      # refer to https://maven.apache.org/plugins/maven-gpg-plugin/usage.html
+      - export MAVEN_GPG_PASSPHRASE=$GPG_CREDENTIAL
 
   build:
     commands:
       - cd $CODEBUILD_SRC_DIR/aws-iot-device-sdk-java
       - mvn -B versions:set -DnewVersion=${PKG_VERSION}
-      - mvn clean deploy -P publishing -Dmaven.test.skip=true
+      - mvn -B clean deploy -Dmaven.test.skip=true -e -X
 
 cache:
   paths:

pom.xml

@@ -5,7 +5,7 @@
   <version>0.0.1-dev</version>
   <packaging>pom</packaging>
   <name>AWS IoT Device SDK for Java</name>
-  <description>The SDK is in maintenance mode, and no longer receive feature updates. Checkout aws-iot-device-sdk for new features. The AWS IoT Device SDK for Java provides Java APIs for devices to connect to AWS IoT service using the MQTT protocol. The SDK also provides support for AWS IoT specific features, such as Thing Shadow and Thing Shadow abstraction.</description>
+  <description>This SDK is now in maintenance mode and will not receive new features. For the latest functionality, please use aws-iot-device-sdk. The AWS IoT Device SDK for Java lets your device applications communicate with the AWS IoT Core service over MQTT. In addition to basic MQTT messaging, it includes built-in support for AWS IoT services such as Thing Shadows, Jobs, and Fleet Provisioning.</description>
   <url>https://aws.amazon.com/iot/sdk</url>
   <licenses>
     <license>