[
https://issues.apache.org/jira/browse/TUSCANY-3722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12920884#action_12920884
]
Simon Nash commented on TUSCANY-3722:
-------------------------------------
It isn't possible to eliminate the possibility that the person doing the
distribution build could have a local maven repository containing the incorrect
version of this jar. Also it isn't possible for the Tuscany distribution build
to force an overwrite of the incorrect jar in the local maven repository by the
correct version.
However it is possible for the Tuscany distribution build to detect that the
version of this jar or pom in the local maven repository is bad and stop the
distribution build with an error message. In order to get the distribution
build to complete, the user would need to manually delete the incorrect jar and
pom from their local maven repository and rerun the distribution build. The
distribution build's pom file would contain an explicit repository setting to
force the correct jar and pom to be downloaded to the user's local maven
repository.
> Tuscany SCA Java 1.x binary distribution could include an incorrect
> jaxws-api-2.1.jar
> -------------------------------------------------------------------------------------
>
> Key: TUSCANY-3722
> URL: https://issues.apache.org/jira/browse/TUSCANY-3722
> Project: Tuscany
> Issue Type: Bug
> Components: SCA Java Runtime
> Affects Versions: Java-SCA-1.6
> Reporter: Simon Nash
> Assignee: Simon Nash
> Fix For: Java-SCA-1.6.1
>
>
> Because of the problem described in [1], the Tuscany SCA Java binary
> distribution lib directory could contain the wrong version of
> jaxws-api-2.1.jar if it so happens that the local maven repository of the
> person building the distribution contains the wrong version of this jar and
> pom. The incorrect version of the jar is missing some classes such as
> javax.xml.ws.soap.Addressing.
> It's very undesirable that Tuscany binary distributions built by different
> people could have different contents. It's also very undesirable that
> Tuscany could propagate the bad version of this jar to users who might
> experience problems because they don't realise that the version of this jar
> that they got from Tuscany is bad.
> [1] http://www.mail-archive.com/dev@tuscany.apache.org/msg06182.html
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
