Hi Jody,
I do not have a list of artifacts that might be needed to
successfully complete a build*,  but indicated a method to get it (clean
builds of
all branches being built, or even just clean build of the main ones, if you
want to change only the pom there).

You indicated a desire to get that improved so... go ahead :-D

Cheers
Andrea

* I did not even remember that json-lib customized jar existed, before Ian
mentioned it

On Mon, Oct 3, 2022 at 11:00 PM Jody Garnett <jody.garn...@gmail.com> wrote:

> Andrea:
>
> Let me check; I did set up the different caches to be filtered. I can take
> that filter off if it is important to you.
>
> 1. geo-solutions-cache is configured with routing rule:
> geosolutions-artifacts
>
> 2. geosolutions-artifact routing rule has the following matchers:
> ^/it/geosolutions/jaiext/.*
> ^/it/geosolutions/imageio-ext/.
> ^/org/libjpegturbo/.*
> ^/com/oracle/.*
> ^/opendap/.*
> ^/me/steinborn/libdeflate-iava-core/.
>
> 3. If there are additional dependencies required they should follow our
> third-party dependency policy (although apparently that is for geotools
> https://docs.geotools.org/latest/developer/procedures/add.htm ). I cannot
> find a similar policy for geoserver.  The goal was to ensure that
> everything is available in one repository so we do not subject downstream
> applications to requiring several repositories (and slowing down their own
> build).
>
> --
> Jody Garnett
>
>
> On Mon, 3 Oct 2022 at 07:51, Andrea Aime <
> andrea.a...@geosolutionsgroup.com> wrote:
>
>> Hi Jody,
>> checking with Alessandro, he had a simple, yet very much to the point,
>> question.. how did Ian stumble into the issue?
>> If OSGeo was mirroring the GeoSolutions fully, maven should not have
>> contacted it for a specific file:
>>
>> curl  "
>> https://maven.geo-solutions.it/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.pom
>> "
>> curl: (60) SSL certificate problem: certificate has expired
>> More details here: https://curl.haxx.se/docs/sslcerts.html
>>
>> I'm guessing that the OSGeo repository is only selectively mirroring the
>> GeoSoutions repository. I cannot find such a file over there.
>> That jar is a customized json-lib that we created years ago to handle a
>> vulnerability.
>>
>> So, if someone wanted to remove the GeoSolutions repos from the build,
>> before that, they'd have to allow full mirroring (or go for a hunt
>> of every jar we are not finding in the OSGeo repo) and ensure all
>> branches of GeoServer that are still building on Jenkins
>> will still be able to build on an empty repo.
>>
>> Cheers
>> Andrea
>>
>> On Mon, Oct 3, 2022 at 3:57 PM Jody Garnett <jody.garn...@gmail.com>
>> wrote:
>>
>>> Can we please remove this repo from our build; it is already cached from
>>> osgeo repo. Listing multiple repositories just slows us down ...
>>>
>>> --
>>> Jody Garnett
>>>
>>>
>>> On Mon, 3 Oct 2022 at 00:40, Alessandro Parma <
>>> alessandro.pa...@geosolutionsgroup.com> wrote:
>>>
>>>> Good Morning Ian,
>>>>
>>>> I'll take a look and fix it. Thanks for the heads up
>>>>
>>>> Regards,
>>>> Alessandro
>>>>
>>>> On Mon, Oct 3, 2022 at 9:30 AM Ian Turton <ijtur...@gmail.com> wrote:
>>>>
>>>>> I'm getting build failures on Github due to the certificate being
>>>>> expired.
>>>>>
>>>>> curl  "
>>>>> https://maven.geo-solutions.it/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.pom";
>>>>>
>>>>> curl: (60) SSL certificate problem: certificate has expired
>>>>> More details here: https://curl.haxx.se/docs/sslcerts.html
>>>>>
>>>>> curl failed to verify the legitimacy of the server and therefore could
>>>>> not
>>>>> establish a secure connection to it. To learn more about this
>>>>> situation and
>>>>> how to fix it, please visit the web page mentioned above.
>>>>>
>>>>> If someone can fix it I'd be grateful,
>>>>>
>>>>> cheers
>>>>>
>>>>> Ian
>>>>>
>>>>> --
>>>>> Ian Turton
>>>>> _______________________________________________
>>>>> Geoserver-devel mailing list
>>>>> Geoserver-devel@lists.sourceforge.net
>>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Regards, Alessandro Parma == GeoServer Professional Services from the
>>>> experts! Visit http://goo.gl/it488V for more information. ==
>>>> Alessandro Parma DevOps Engineer GeoSolutions S.A.S. Via di Montramito 3/A
>>>> 55054 Massarosa (LU) Italy phone: +39 340 4752467 fax: +39 0584 1660272
>>>> https://www.geosolutionsgroup.com https://twitter.com/geosolutions_it
>>>> ------------------------------------------------------- Con riferimento
>>>> alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 -
>>>> Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni
>>>> circostanza inerente alla presente email (il suo contenuto, gli eventuali
>>>> allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i
>>>> destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per
>>>> errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le
>>>> sarei comunque grato se potesse darmene notizia. This email is intended
>>>> only for the person or entity to which it is addressed and may contain
>>>> information that is privileged, confidential or otherwise protected from
>>>> disclosure. We remind that - as provided by European Regulation 2016/679
>>>> “GDPR” - copying, dissemination or use of this e-mail or the information
>>>> herein by anyone other than the intended recipient is prohibited. If you
>>>> have received this email by mistake, please notify us immediately by
>>>> telephone or e-mail.
>>>> _______________________________________________
>>>> Geoserver-devel mailing list
>>>> Geoserver-devel@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>>>
>>> _______________________________________________
>>> Geoserver-devel mailing list
>>> Geoserver-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>>
>>
>>
>> --
>>
>> Regards,
>>
>> Andrea Aime
>>
>> ==
>> GeoServer Professional Services from the experts!
>>
>> Visit http://bit.ly/gs-services-us for more information.
>> ==
>>
>> Ing. Andrea Aime
>> @geowolf
>> Technical Lead
>>
>> GeoSolutions Group
>> phone: +39 0584 962313
>>
>> fax:     +39 0584 1660272
>>
>> mob:   +39  339 8844549
>>
>> https://www.geosolutionsgroup.com/
>>
>> http://twitter.com/geosolutions_it
>>
>> -------------------------------------------------------
>>
>> Con riferimento alla normativa sul trattamento dei dati personali (Reg.
>> UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
>> precisa che ogni circostanza inerente alla presente email (il suo
>> contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
>> riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
>> messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
>> operazione è illecita. Le sarei comunque grato se potesse darmene notizia.
>>
>> This email is intended only for the person or entity to which it is
>> addressed and may contain information that is privileged, confidential or
>> otherwise protected from disclosure. We remind that - as provided by
>> European Regulation 2016/679 “GDPR” - copying, dissemination or use of this
>> e-mail or the information herein by anyone other than the intended
>> recipient is prohibited. If you have received this email by mistake, please
>> notify us immediately by telephone or e-mail
>>
>

-- 

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax:     +39 0584 1660272

mob:   +39  339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

-------------------------------------------------------

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE
2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
precisa che ogni circostanza inerente alla presente email (il suo
contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is
addressed and may contain information that is privileged, confidential or
otherwise protected from disclosure. We remind that - as provided by
European Regulation 2016/679 “GDPR” - copying, dissemination or use of this
e-mail or the information herein by anyone other than the intended
recipient is prohibited. If you have received this email by mistake, please
notify us immediately by telephone or e-mail
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to