[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552161#comment-17552161 ] PJ Fanning commented on CONNECTORS-1716: Thanks [~kwri...@metacarta.com] - would it be possible to uptake the 2 other URL updates (for Rat and clojars). I tested those with: ``` ant rat-bootstrap1 ant download-h2-support ``` > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[
https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552090#comment-17552090
]
Karl Wright commented on CONNECTORS-1716:
-
Tried that URL here and it worked fine via "ant download-nuxeo-client":
{code}
BUILD SUCCESSFUL
Total time: 5 seconds
{code}
So I committed that change.
> should not use http to download artifacts (need https)
> --
>
> Key: CONNECTORS-1716
> URL: https://issues.apache.org/jira/browse/CONNECTORS-1716
> Project: ManifoldCF
> Issue Type: Bug
>Reporter: PJ Fanning
>Assignee: Karl Wright
>Priority: Major
>
> build.xml has a number of insecure http URLs
> the nexus one is a special problem because the https equivalent has the wrong
> SSL cert - see https://maven.nuxeo.com/
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552086#comment-17552086 ] Karl Wright commented on CONNECTORS-1716: - That sounds like a workable option for the moment. I'll commit it if it seems to download the artifacts needed correctly. > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552081#comment-17552081 ] PJ Fanning commented on CONNECTORS-1716: https://maven-eu.nuxeo.org/nexus/content/repositories/public-releases/ might be an option - I have made the change in my PR and will see if it works there. > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552079#comment-17552079 ] Karl Wright commented on CONNECTORS-1716: - I looked into the nuxeo case; this is a client library required for building the nuxeo connector, so it is not just a testing artifact (where I have encountered poor adherence to ssl use in the past). Unfortunately, as you point out, nuxeo's cert has expired and the only solution is to fully decommission the Nuxeo connector until this has been addressed. > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552074#comment-17552074 ] Karl Wright commented on CONNECTORS-1716: - [~pj.fanning] I am well aware of the reason. The only option, however, is to turn off the specific integration test. Please note that the integration tests are NOT run until after the build takes place, so they will not have any potential of corrupting the build. Testing artifacts are not distributed as part of the distribution either. > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552069#comment-17552069 ] PJ Fanning commented on CONNECTORS-1716: [~kwri...@metacarta.com] https://github.com/apache/manifoldcf/pull/121 > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
[jira] [Commented] (CONNECTORS-1716) should not use http to download artifacts (need https)
[ https://issues.apache.org/jira/browse/CONNECTORS-1716?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552065#comment-17552065 ] Karl Wright commented on CONNECTORS-1716: - Please propose a patch. I am not certain what downloads you are specifically talking about but this happens only during the build process, and may be for a testing artifact. In some cases https is not used because it is not supported by the test component supplier, e.g. alfresco or mongodb. If you can find a way around that, great, if not there is nothing we can do about it. > should not use http to download artifacts (need https) > -- > > Key: CONNECTORS-1716 > URL: https://issues.apache.org/jira/browse/CONNECTORS-1716 > Project: ManifoldCF > Issue Type: Bug >Reporter: PJ Fanning >Assignee: Karl Wright >Priority: Major > > build.xml has a number of insecure http URLs > the nexus one is a special problem because the https equivalent has the wrong > SSL cert - see https://maven.nuxeo.com/ -- This message was sent by Atlassian Jira (v8.20.7#820007)
