[
https://issues.apache.org/jira/browse/CXF-8913?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18074034#comment-18074034
]
Frank Huurman commented on CXF-8913:
------------------------------------
I think I ran into the unreachable opensaml repo (for version 5.x+)as well
yesterday trying to build/run a simple soap service with CXF in Apache Karavan.
My team is currently evaluating using Karavan/Camel/CXF as a stack to move away
from some Oracle products and fund an open source stack like this instead but
we'll have to be able to build some things first haha.
But I'm not 100% sure if it's the same issue since it's still happening today
trying to spin up a Karavan dev container with a CXF component:
{code:java}
2026-04-16 15:36:26.525 INFO 1 --- [ main]
.main.download.MavenDependencyDownloader : Downloading:
org.apache.camel:camel-cxf-soap:4.18.1 (elapsed: 5s)2026-04-16 15:36:26.890
ERROR 1 --- [ main] .main.download.MavenDependencyDownloader : Error
downloading: org.apache.camel:camel-cxf-soap:4.18.1 due to:
org.apache.camel.main.download.DownloadException: Cannot resolve dependencies
in https://repo1.maven.org/maven2java.util.concurrent.ExecutionException:
org.apache.camel.main.download.DownloadException: Cannot resolve dependencies
in https://repo1.maven.org/maven2 at
java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122) at
java.base/java.util.concurrent.FutureTask.get(FutureTask.java:205) at
org.apache.camel.main.download.DownloadThreadPool.awaitCompletion(DownloadThreadPool.java:75)
at
org.apache.camel.main.download.DownloadThreadPool.download(DownloadThreadPool.java:67)
at
org.apache.camel.main.download.MavenDependencyDownloader.doDownloadDependencyWithParent(MavenDependencyDownloader.java:295)
at
org.apache.camel.main.download.MavenDependencyDownloader.doDownloadDependency(MavenDependencyDownloader.java:254)
at
org.apache.camel.main.download.MavenDependencyDownloader.downloadDependency(MavenDependencyDownloader.java:248)
at
org.apache.camel.main.download.MavenDependencyDownloader.downloadDependency(MavenDependencyDownloader.java:233)
at
org.apache.camel.main.download.DependencyDownloaderUriFactoryResolver.resolveFactory(DependencyDownloaderUriFactoryResolver.java:43)
at
org.apache.camel.impl.engine.DefaultCamelContextExtension.getEndpointUriFactory(DefaultCamelContextExtension.java:1066)
at
org.apache.camel.dsl.yaml.common.YamlSupport.createEndpointUri(YamlSupport.java:95)
at
org.apache.camel.dsl.yaml.common.YamlSupport.creteEndpointUri(YamlSupport.java:195)
at
org.apache.camel.dsl.yaml.deserializers.FromDefinitionDeserializer.construct(FromDefinitionDeserializer.java:88)
at
org.apache.camel.dsl.yaml.common.YamlDeserializationContext.lambda$resolve$0(YamlDeserializationContext.java:157)
at
org.apache.camel.dsl.yaml.common.YamlDeserializerSupport.asType(YamlDeserializerSupport.java:347)
at
org.apache.camel.dsl.yaml.deserializers.RouteDefinitionDeserializer.setProperties(RouteDefinitionDeserializer.java:161)
at
org.apache.camel.dsl.yaml.deserializers.RouteDefinitionDeserializer.setProperties(RouteDefinitionDeserializer.java:37)
at
org.apache.camel.dsl.yaml.common.YamlDeserializerBase.construct(YamlDeserializerBase.java:64)
at
org.apache.camel.dsl.yaml.common.YamlDeserializationContext.lambda$resolve$1(YamlDeserializationContext.java:198)
at
org.apache.camel.dsl.yaml.YamlRoutesBuilderLoader$1.configure(YamlRoutesBuilderLoader.java:150)
at
org.apache.camel.builder.RouteBuilder.checkInitialized(RouteBuilder.java:910)
at
org.apache.camel.builder.RouteBuilder.configureRoutes(RouteBuilder.java:834) at
org.apache.camel.builder.RouteBuilder.prepareModel(RouteBuilder.java:750) at
org.apache.camel.builder.RouteBuilder.addRoutesToCamelContext(RouteBuilder.java:768)
at
org.apache.camel.impl.engine.AbstractCamelContext.addRoutes(AbstractCamelContext.java:1096)
at
org.apache.camel.main.RoutesConfigurer.addDiscoveredRoutes(RoutesConfigurer.java:355)
at
org.apache.camel.main.RoutesConfigurer.configureRoutes(RoutesConfigurer.java:325)
at
org.apache.camel.main.BaseMainSupport.configureRoutes(BaseMainSupport.java:877)
at
org.apache.camel.main.BaseMainSupport.postProcessCamelContext(BaseMainSupport.java:972)
at
org.apache.camel.main.MainSupport.initCamelContext(MainSupport.java:352)
at org.apache.camel.main.KameletMain.doInit(KameletMain.java:402) at
org.apache.camel.support.service.BaseService.init(BaseService.java:85) at
org.apache.camel.support.service.BaseService.start(BaseService.java:115) at
org.apache.camel.dsl.jbang.core.commands.Run.runKameletMain(Run.java:1736) at
org.apache.camel.dsl.jbang.core.commands.Run.run(Run.java:1067) at
org.apache.camel.dsl.jbang.core.commands.Run.doCall(Run.java:394) at
org.apache.camel.dsl.jbang.core.commands.CamelCommand.call(CamelCommand.java:72)
at
org.apache.camel.dsl.jbang.core.commands.CamelCommand.call(CamelCommand.java:38)
at picocli.CommandLine.executeUserObject(CommandLine.java:2031) at
picocli.CommandLine.access$1500(CommandLine.java:148) at
picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2469)
at picocli.CommandLine$RunLast.handle(CommandLine.java:2461) at
picocli.CommandLine$RunLast.handle(CommandLine.java:2423) at
picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2277)
at picocli.CommandLine$RunLast.execute(CommandLine.java:2425) at
picocli.CommandLine.execute(CommandLine.java:2174) at
org.apache.camel.dsl.jbang.core.commands.CamelJBangMain.run(CamelJBangMain.java:214)
at
org.apache.camel.dsl.jbang.core.commands.CamelJBangMain.run(CamelJBangMain.java:72)
at main.CamelJBang.main(CamelJBang.java:37)Caused by:
org.apache.camel.main.download.DownloadException: Cannot resolve dependencies
in https://repo1.maven.org/maven2 at
org.apache.camel.main.download.MavenDependencyDownloader.resolveDependenciesViaAether(MavenDependencyDownloader.java:618)
at
org.apache.camel.main.download.MavenDependencyDownloader.lambda$doDownloadDependencyWithParent$0(MavenDependencyDownloader.java:311)
at
java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)
Caused by: org.apache.camel.tooling.maven.MavenResolutionException: The
following artifacts could not be resolved:
org.opensaml:opensaml-saml-impl:jar:5.1.6 (absent),
org.opensaml:opensaml-xacml-impl:jar:5.1.6 (absent),
org.opensaml:opensaml-xacml-saml-impl:jar:5.1.6 (absent): Could not find
artifact org.opensaml:opensaml-saml-impl:jar:5.1.6 in central
(https://repo1.maven.org/maven2) at
org.apache.camel.tooling.maven.MavenDownloaderImpl.resolveArtifacts(MavenDownloaderImpl.java:483)
at
org.apache.camel.main.download.MavenDependencyDownloader.resolveDependenciesViaAether(MavenDependencyDownloader.java:612)
... 6 moreCaused by:
org.eclipse.aether.resolution.DependencyResolutionException: The following
artifacts could not be resolved: org.opensaml:opensaml-saml-impl:jar:5.1.6
(absent), org.opensaml:opensaml-xacml-impl:jar:5.1.6 (absent),
org.opensaml:opensaml-xacml-saml-impl:jar:5.1.6 (absent): Could not find
artifact org.opensaml:opensaml-saml-impl:jar:5.1.6 in central
(https://repo1.maven.org/maven2) at
org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies(DefaultRepositorySystem.java:365)
at
org.apache.camel.tooling.maven.MavenDownloaderImpl.resolveArtifacts(MavenDownloaderImpl.java:472)
... 7 moreCaused by:
org.eclipse.aether.resolution.ArtifactResolutionException: The following
artifacts could not be resolved: org.opensaml:opensaml-saml-impl:jar:5.1.6
(absent), org.opensaml:opensaml-xacml-impl:jar:5.1.6 (absent),
org.opensaml:opensaml-xacml-saml-impl:jar:5.1.6 (absent): Could not find
artifact org.opensaml:opensaml-saml-impl:jar:5.1.6 in central
(https://repo1.maven.org/maven2) at
org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolve(DefaultArtifactResolver.java:473)
at
org.eclipse.aether.internal.impl.DefaultArtifactResolver.resolveArtifacts(DefaultArtifactResolver.java:261)
at
org.eclipse.aether.internal.impl.DefaultRepositorySystem.resolveDependencies(DefaultRepositorySystem.java:353)
... 8 moreCaused by:
org.eclipse.aether.transfer.ArtifactNotFoundException: Could not find artifact
org.opensaml:opensaml-saml-impl:jar:5.1.6 in central
(https://repo1.maven.org/maven2) at
org.eclipse.aether.connector.basic.ArtifactTransportListener.transferFailed(ArtifactTransportListener.java:42)
at
org.eclipse.aether.connector.basic.BasicRepositoryConnector$TaskRunner.run(BasicRepositoryConnector.java:395)
at
org.eclipse.aether.util.concurrency.RunnableErrorForwarder.lambda$wrap$0(RunnableErrorForwarder.java:66)
... 3 more{code}
> Avoid 3rd party maven repository for OpenSAML
> ---------------------------------------------
>
> Key: CXF-8913
> URL: https://issues.apache.org/jira/browse/CXF-8913
> Project: CXF
> Issue Type: Improvement
> Components: WS-* Components
> Affects Versions: 4.0.2
> Reporter: Claus Ibsen
> Assignee: Colm O hEigeartaigh
> Priority: Major
>
> Apache CXF depends on OpenSAML from Apache WSSJ project
> However this commit causes wss4j to download JARs from NOT maven central but
> from
> https://build.shibboleth.net/nexus/content/groups/public
> https://github.com/apache/ws-wss4j/commit/e4a33efcb2b474a1da2b2c08f815b2718e111823
> Is there a way for Apache CXF to only use JARs from maven central. There is a
> trust issue when JARs are NOT downloaded from central.
> At Apache Camel we only download from maven central - except for camel-jira
> which sadly had to download from Atlassian. We are considering deprecating
> and removing this component for that reason.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
