[MGPG-136] Windows passphrase corruption

src/main/java/org/apache/maven/plugins/gpg/AbstractGpgMojo.java

@@ -270,6 +270,20 @@ public abstract class AbstractGpgMojo extends AbstractMojo {
     @Parameter(property = "gpg.bestPractices", defaultValue = "false")
     private boolean bestPractices;
 
+    /**
+     * Whether to append the passphrase with LF character or not, as on some systems and some GPG executable combinations
+     * lack of this character may cause GPG to not detect passphrase on STDIN. Since 3.2.0 it was always appended, unless
+     * passphrase itself ended with line separator. This parameter affects ONLY the GPG signer, not the BC signer.
+     * <p>
+     * By default, this parameter is {@code true} to retain same behaviour as before.
+     *
+     * @since 3.2.7
+     * @see <a href="https://issues.apache.org/jira/browse/MGPG-99">MGPG-99</a>
+     * @see <a href="https://issues.apache.org/jira/browse/MGPG-136">MGPG-136</a>
+     */
+    @Parameter(property = "gpg.passphraseLf", defaultValue = "true")
+    private boolean passphraseLf;
+
     /**
      * Current user system settings for use in Maven.
      *
@@ -345,6 +359,7 @@ protected AbstractGpgSigner newSigner(MavenProject mavenProject) throws MojoFail
         signer.setPublicKeyring(publicKeyring);
         signer.setLockMode(lockMode);
         signer.setArgs(gpgArguments);
+        signer.setPassphraseLf(passphraseLf);
 
         // "new way": env prevails
         String passphrase =

src/main/java/org/apache/maven/plugins/gpg/AbstractGpgSigner.java

@@ -46,6 +46,8 @@ public abstract class AbstractGpgSigner {
 
     protected String passphrase;
 
+    protected boolean passphraseLf;
+
     private File outputDir;
 
     private File buildDir;
@@ -98,6 +100,10 @@ public void setPassPhrase(String s) {
         passphrase = s;
     }
 
+    public void setPassphraseLf(boolean b) {
+        this.passphraseLf = b;
+    }
+
     public void setOutputDirectory(File out) {
         outputDir = out;
     }

src/main/java/org/apache/maven/plugins/gpg/GpgSigner.java

@@ -113,8 +113,9 @@ protected void generateSignatureForFile(File file, File signature) throws MojoEx
             cmd.createArg().setValue("0");
 
             // Prepare the input stream which will be used to pass the passphrase to the executable
-            if (!passphrase.endsWith(System.lineSeparator())) {
-                in = new ByteArrayInputStream((passphrase + System.lineSeparator()).getBytes());
+            // but obey passphraseLf: append LF if asked for
+            if (passphraseLf && !passphrase.endsWith("\n")) {
+                in = new ByteArrayInputStream((passphrase + "\n").getBytes());
             } else {
                 in = new ByteArrayInputStream(passphrase.getBytes());
             }