The features file would only pull in the opensaml jar/bundle, not the wrong 
xerces.  We don’t use “cxf.opensaml.osgi.version” as a version for any sort of 
<dependency”.   Therefore, I’m failing to see how this is a problem.

Dan



On Oct 9, 2014, at 1:43 AM, Freeman Fang <freeman.f...@gmail.com> wrote:

> I'm sorry to say I have to -1 for both.
> 
> As both CXF 2.7.13 and 3.0.2 use 
> <cxf.opensaml.osgi.version>2.6.1_1</cxf.opensaml.osgi.version>
> however servicemix wrapped opensaml 2.6.1_1 pull in wrong xerces dependency 
> like(because build against the Shibboleth repo but not the maven central 
> repo)[1]
> 
> <dependency>
>    <groupId>org.apache.xerces</groupId>
>    <artifactId>xercesImpl</artifactId>
>    <version>2.10.0</version>
>    <scope>runtime</scope>
> </dependency>
> 
> This wrong groupId can cause lots of problems as Dan explained in CXF-5565[3].
> servicemix wrapped opensaml 2.6.1_2[2] already fixed this
> 
> So we need use 
> <cxf.opensaml.osgi.version>2.6.1_2</cxf.opensaml.osgi.version>
> instead.
> 
> I will commit fix soon.
> 
> [1]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_1/org.apache.servicemix.bundles.opensaml-2.6.1_1.pom
> [2]http://repo2.maven.org/maven2/org/apache/servicemix/bundles/org.apache.servicemix.bundles.opensaml/2.6.1_2/org.apache.servicemix.bundles.opensaml-2.6.1_2.pom
> [3]https://issues.apache.org/jira/browse/CXF-5565
> -------------
> Freeman(Yue) Fang
> 
> Red Hat, Inc. 
> FuseSource is now part of Red Hat
> 
> 
> 
> On 2014-10-9, at 上午1:30, Daniel Kulp wrote:
> 
>> 
>> This is a vote to release CXF 2.7.13 and 3.0.2.    There are over 90 JIRA 
>> issues resolved for 3.0.2 which is a lot.
>> 
>> Tags:
>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=3ec631c97e9eccf62490b176aab61044b3b9ab9f
>> https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=44fff0be11438e91e236bc204e5975bd744613c1
>> 
>> Staging areas:
>> https://repository.apache.org/content/repositories/orgapachecxf-1029/
>> https://repository.apache.org/content/repositories/orgapachecxf-1030/
>> 
>> 
>> Here is my +1
>> 
>> -- 
>> Daniel Kulp
>> dk...@apache.org - http://dankulp.com/blog
>> Talend Community Coder - http://coders.talend.com
>> 
> 

-- 
Daniel Kulp
dk...@apache.org - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com

Reply via email to