[jira] [Created] (JCLOUDS-1551) Update version of OkHttp

2020-09-10 Thread Konstantin Orlov (Jira) 
Konstantin Orlov created JCLOUDS-1551:
-

 Summary: Update version of OkHttp
 Key: JCLOUDS-1551
 URL: https://issues.apache.org/jira/browse/JCLOUDS-1551
 Project: jclouds
  Issue Type: Improvement
  Components: jclouds-drivers
Affects Versions: 2.2.1
Reporter: Konstantin Orlov


Current version of {{OkHttp}} (ver 2.2.0) has [a vulnerability of medium 
severity|https://nvd.nist.gov/vuln/detail/CVE-2016-2402]. It would nice to bump 
the version to get rid of this vulnerability.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Commented] (JCLOUDS-1551) Update version of OkHttp

2020-09-10 Thread Andrew Gaul (Jira) 


[ 
https://issues.apache.org/jira/browse/JCLOUDS-1551?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17193506#comment-17193506
 ] 

Andrew Gaul commented on JCLOUDS-1551:
--

I created https://github.com/apache/jclouds/pull/71 to upgrade OkHttp to 2.7.5. 
 I had hoped that this would address a Java 8 update 1024 bit certificate 
incompatibility but unfortunately a newer version is required.  Unfortunately 
the OkHttp APIs changed quite a bit so moving to version 3 or 4 is a lot of 
work.

> Update version of OkHttp
> 
>
> Key: JCLOUDS-1551
> URL: https://issues.apache.org/jira/browse/JCLOUDS-1551
> Project: jclouds
>  Issue Type: Improvement
>  Components: jclouds-drivers
>Affects Versions: 2.2.1
>Reporter: Konstantin Orlov
>Priority: Major
>
> Current version of {{OkHttp}} (ver 2.2.0) has [a vulnerability of medium 
> severity|https://nvd.nist.gov/vuln/detail/CVE-2016-2402]. It would nice to 
> bump the version to get rid of this vulnerability.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Commented] (JCLOUDS-1551) Update version of OkHttp

2020-09-10 Thread Andrew Gaul (Jira) 


[ 
https://issues.apache.org/jira/browse/JCLOUDS-1551?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17193508#comment-17193508
 ] 

Andrew Gaul commented on JCLOUDS-1551:
--

Sigh, I forgot that this PR had a BounceCastle incompatibility that I could not 
figure out.

> Update version of OkHttp
> 
>
> Key: JCLOUDS-1551
> URL: https://issues.apache.org/jira/browse/JCLOUDS-1551
> Project: jclouds
>  Issue Type: Improvement
>  Components: jclouds-drivers
>Affects Versions: 2.2.1
>Reporter: Konstantin Orlov
>Priority: Major
>
> Current version of {{OkHttp}} (ver 2.2.0) has [a vulnerability of medium 
> severity|https://nvd.nist.gov/vuln/detail/CVE-2016-2402]. It would nice to 
> bump the version to get rid of this vulnerability.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

[jira] [Commented] (JCLOUDS-1551) Update version of OkHttp

2020-09-10 Thread Andrew Gaul (Jira) 


[ 
https://issues.apache.org/jira/browse/JCLOUDS-1551?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17193556#comment-17193556
 ] 

Andrew Gaul commented on JCLOUDS-1551:
--

[~korlov] Upgrading past 2.7.5 requires changing API calls.  Is there any 
chance you could look into this?

> Update version of OkHttp
> 
>
> Key: JCLOUDS-1551
> URL: https://issues.apache.org/jira/browse/JCLOUDS-1551
> Project: jclouds
>  Issue Type: Improvement
>  Components: jclouds-drivers
>Affects Versions: 2.2.1
>Reporter: Konstantin Orlov
>Priority: Major
>
> Current version of {{OkHttp}} (ver 2.2.0) has [a vulnerability of medium 
> severity|https://nvd.nist.gov/vuln/detail/CVE-2016-2402]. It would nice to 
> bump the version to get rid of this vulnerability.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)