Re: Notice: Java 6 and 7 users: SSL Protocol upgrades coming to Central

2018-06-13 Thread Karl Heinz Marbaise

Hi Brian,

I have posted the same here:

https://blogs.apache.org/maven/entry/notice-java-6-and-7

Kind regards
Karl Heinz Marbaise
On 21/05/18 20:22, Brian Fox wrote:

The march of standards continues unabated. Legacy TLS protocols 1.0
and 1.1 have varying weaknesses that could lead to a false sense of
security.

In June, in an effort to raise security and comply with modern
standards, the insecure TLS 1.0 & 1.1 protocols will no longer be
supported for SSL connections to Central. This should only affect
users of Java 6 that are also using https to access central, which by
our metrics is less than .2% of users.

At the same time, this conversion will allow Central to support HTTP/2
with potential performance gains for modern http clients.

The details about why, when and what you need to do are documented at
the link below. As questions come up, we will continue to update this
faq.

If there is specific information required for non-maven build systems,
please send it along and we will include that as well.

https://central.sonatype.org/articles/2018/May/04/discontinue-support-for-tlsv11-and-below/

I've posted the same content as a blog to make it easier to
disseminate here:
https://blog.sonatype.com/enhancing-ssl-security-and-http/2-support-for-central



-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



Re: When does a Maven plugin uses the POM in the current directory?

2018-06-13 Thread Karl Heinz Marbaise

Hi,

you can do that in different flavours..

by using an execution id like `default-cli` this will be used during the 
execution on command line (using the current configuration) furthermore 
since Maven 3.3.1 you can use things like[1]:


mvn version:set@Id

which means you can do a different configuration for command line in the 
pom file:


Just by simply separating them by different id

 

  
org.codehaus.mojo
versions-maven-plugin
2.5.

  
default-cli

  ...

  
  
second-cli

   

  

  

  



[1]: https://maven.apache.org/docs/3.3.1/release-notes.html

On 13/06/18 08:08, Anders Hammar wrote:

If you put the configuration of the plugin within the pluginManagement
section of the pom, it will be used if you execute the plugin from command
line.

/Anders

On Tue, Jun 12, 2018 at 5:21 PM Oliver B. Fischer 
wrote:


Dear all,

I use the Versions Maven Plugin to check for updates of my dependencies.
Therefore I added the following lines to my pom.xml:


  org.codehaus.mojo
  versions-maven-plugin
  ${versions-plugin.version}
  
  classpath:///rules.xml
  
  
  
  versionrules
  versionrules
  1-SNAPSHOT
  
  


But this configuration is not used if I run the Versions Maven Plugin in
the same directory as the pom.xml. The only way to my own configuration
is to put this plugin configuration in a profil and execute this profil
during the Maven run.

Is there a way to run the Versions plugin on the commandline and to
configure it via the pom.xml?

Bye,

Oliver

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org




-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org



Re: When does a Maven plugin uses the POM in the current directory?

2018-06-13 Thread Anders Hammar
If you put the configuration of the plugin within the pluginManagement
section of the pom, it will be used if you execute the plugin from command
line.

/Anders

On Tue, Jun 12, 2018 at 5:21 PM Oliver B. Fischer 
wrote:

> Dear all,
>
> I use the Versions Maven Plugin to check for updates of my dependencies.
> Therefore I added the following lines to my pom.xml:
>
> 
>  org.codehaus.mojo
>  versions-maven-plugin
>  ${versions-plugin.version}
>  
>  classpath:///rules.xml
>  
>  
>  
>  versionrules
>  versionrules
>  1-SNAPSHOT
>  
>  
> 
>
> But this configuration is not used if I run the Versions Maven Plugin in
> the same directory as the pom.xml. The only way to my own configuration
> is to put this plugin configuration in a profil and execute this profil
> during the Maven run.
>
> Is there a way to run the Versions plugin on the commandline and to
> configure it via the pom.xml?
>
> Bye,
>
> Oliver
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>
>