Re: 1.8.3 release date

2024-04-30 Thread robertlazarski
The upgrade from httpclient4 to httpclient5 is taking longer than I expected - I made a first pass in coding but I am still debugging it. After I get to a good stopping point, I'll be doing an Axiom release and then an Axis2 release. And a few Rampart releases, pre and post jakarta. I do want to

Re: [PR] Use XMLBeans' BindingConfigImpl in Axis2BindingConfig instead of XSDConfig, +doc. [axis-axis2-java-core]

2024-04-10 Thread robertlazarski
Definitely file a bug and FYI I will have some time to review your work soon - I am deep in the httpclient5 update and that is the last major hurdle for what most people use Axis2 for. >From there, I can then review what you have done in 1.7.9. On Wed, Apr 10, 2024 at 10:11 AM Steven De Herdt

Re: Xml external entity issue

2024-03-08 Thread robertlazarski
Best I can tell you are using a very old version of Axis2 and Axiom but anyways that looks like noise from an automated scanning tool because an XXE is DTD related and web services standards like SOAP prohibit DTD's. That Axiom code hasn't changed in about a decade so it doesn't seem to be a real

Re: [PR] Use XMLBeans' BindingConfigImpl in Axis2BindingConfig instead of XSDConfig, +doc. [axis-axis2-java-core]

2024-03-08 Thread robertlazarski
See: ./src/site/markdown/release-process.md There is says (skip the commit obviously): 6. Change to the `target/checkout` directory and prepare the site usi ng the following commands: mvn site-deploy mvn scm-publish:publish-scm -Dscmpublish.skipCheckin=true Now go to the

Re: Request for location of Axis 1.4.1 SNAPSHOT source code

2023-12-06 Thread robertlazarski
ntPart must implement the inherited abstract method > AttachmentPart.getBase64Content() in AttachmentPart.java extending > javax.xml.soap.AttachmentPart > > Please suggest! > > > Regards, > > Nikhil > > On Mon, Dec 4, 2023 at 10:00 PM robertlazarski > wrote: > >> We moved al

Re: Request for location of Axis 1.4.1 SNAPSHOT source code

2023-12-04 Thread robertlazarski
We moved all active Axis related projects to github a few years ago, for axis 1.x see below: https://github.com/apache/axis-axis1-java Although there has not been an official release of that project since 2006, we still apply security fixes - the last one was this September and another one is

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

2023-10-02 Thread robertlazarski
> On Sun, Jun 25, 2023 at 6:37 PM Andreas Veithen-Knowles < >> andreas.veit...@gmail.com> wrote: >> >>> I did some investigation. The Axis2 build doesn't work with Maven < >>> 3.6.0. I've updated the minimum required version at HEAD to 3.6.0. Also, >>

Re: [Axis 2] spring 6 tomcat 10 issue

2023-09-27 Thread robertlazarski
Tomcat 10 will run javax packages via the folder named webapps-javaee i.e. Tomcat 10 has a compatibility mode that will run Axis2. The next release of Axis2 will no longer support javax packages in favor of jakarta but that won't likely happen until 2024. On Wed, Sep 27, 2023 at 2:36 AM Vignesh

Re: [Axis2] java 17 tomcat 9

2023-09-15 Thread robertlazarski
n Fri, 15 Sept, 2023, 5:26 am robertlazarski, > wrote: > >> Is that happening on Axis2 1.8.2? >> >> axiom-impl-1.4.0.jar probably only works on Axis2 1.8.2. >> >> axiom-impl-1.2.20.jar is from seven years ago, which is why I ask. >> >> >>

Re: [Axis2] java 17 tomcat 9

2023-09-14 Thread robertlazarski
Is that happening on Axis2 1.8.2? axiom-impl-1.4.0.jar probably only works on Axis2 1.8.2. axiom-impl-1.2.20.jar is from seven years ago, which is why I ask. On Thu, Sep 14, 2023 at 12:29 PM Vignesh R wrote: > Hi, > > Upgrading axiom-impl-1.2.20.jar to axiom-impl-1.4.0.jar throws NULL >

Re: [Axis2] Java 17 axis isue

2023-08-23 Thread robertlazarski
Hello, This link should show the correct url of your service, if it is installed correctly. http://localhost:8080/axis2/services/listServices This url will show the state of axis2, and will identify problems. http://localhost:8080/axis2/axis2-web/HappyAxis.jsp On Wed, Aug 23, 2023, 18:59

Re: [Axis2] java 17

2023-08-17 Thread robertlazarski
is the quickest way to know for sure and get a resolution. On Thu, Aug 17, 2023 at 3:09 AM Vignesh Ragavan wrote: > Thanks for the update. > > Can't we use axis2 with java 17 and spring 6 version for now? > > > On Thu, 17 Aug, 2023, 6:35 pm robertlazarski, > wrote: > >&

Re: [Axis2] java 17

2023-08-17 Thread robertlazarski
1 pm Vignesh Ragavan, > wrote: > >> Axis2-transport-http uses javax.servlet and java 17 support jakarta. How >> to resolve this issue? >> >> On Thu, 17 Aug, 2023, 5:30 pm robertlazarski, >> wrote: >> >>> At my day job, all of our projects use JDK 17 a

Re: [Axis2] java 17

2023-08-17 Thread robertlazarski
At my day job, all of our projects use JDK 17 and I expect that you will have no issues. On Thu, Aug 17, 2023, 18:39 Vignesh Ragavan wrote: > Hi > > I am using Axis2-transport-http maven dependency in my project. I am > updating project to java 17. Is axis2 support java 17? > > Thanks > Vignesh

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

2023-06-22 Thread robertlazarski
and will break typical XML SOAP handling, just skip it entirely. The Spring deps are only required if using org.apache.axis2.extensions.spring.receivers.SpringServletContextObjectSupplier in a custom Spring config. On Thu, Jun 22, 2023 at 9:35 AM robertlazarski wrote: > I suspect you are having s

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

2023-06-22 Thread robertlazarski
org.apache.axis2.extensions.spring.receivers.SpringServletContextObjectSupplier in a Spring config. On Wed, Jun 21, 2023 at 1:54 PM Steven Saunders wrote: > Hi robertlazarski, > > I really appreciate the quick response and willingness to help! > My build image is OS RedHat 8 Linux x86_64 for

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

2023-06-21 Thread robertlazarski
I looked at the attached logs and I suspect that the unit tests are not multi-platform really. I suggest seeing if skipping the tests help via -Dmaven.test.skip.exec. On Wed, Jun 21, 2023 at 10:01 AM Steven Saunders wrote: > Hi robertlazarski, > > I am fine with handling upgrading and

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

2023-06-21 Thread robertlazarski
We are right in the middle of trying to get an Apache Rampart release out and cannot always respond to every Axis2 dep with a CVE. First of all you may not actually need those deps. Not all deps are mandatory. Secondly, the only thing Axis2 will do is update the pom.xml and indeed via GitHub

Re: [jira] [Closed] (AXIS2-6038) Axis2 1.8.1 links on the download page are dead

2022-07-22 Thread robertlazarski
Thanks for letting us know. The issue should be fixed now. Let us know if you still have problems. On Fri, Jul 22, 2022 at 7:56 AM Paul Maudib wrote: > The links for "Service Archive plugin for Eclipse” and "Code Generator > plugin for Eclipse” don’t seem to work. Do I need to wait or is there

[Announce] Release of Apache Axis2 1.8.2

2022-07-22 Thread robertlazarski
The Apache Axis2 team is pleased to announce the general availability of the Axis2 1.8.2 release. The new version can be downloaded here: http://axis.apache.org/axis2/java/core/download.cgi It is also available from Maven central. -- The Apache Axis2 team

Re: [VOTE] Release Apache Axis2 1.8.2

2022-07-20 Thread robertlazarski
How is it that the generated site has links to the 1.8.1 and 1.8.2 release > notes, although they don't appear in site.xml ( > https://github.com/apache/axis-axis2-java-core/blob/v1.8.2/src/site/site.xml#L60 > )? > > > > Andreas > > > > On Sat, Jul 16, 2022 at 4:46 PM

Re: [VOTE] Release Apache Axis2 1.8.2

2022-07-18 Thread robertlazarski
On Sun, Jul 17, 2022 at 12:49 AM Andreas Veithen-Knowles < andreas.veit...@gmail.com> wrote: > How is it that the generated site has links to the 1.8.1 and 1.8.2 release > notes, although they don't appear in site.xml ( >

[VOTE] Release Apache Axis2 1.8.2

2022-07-15 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.2 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.2 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1024/ Site:

Fwd: [GitHub] [axis-axis2-java-core] joakime commented on pull request #325: Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622

2022-06-23 Thread robertlazarski
FYI. We'll need to upgrade then. -- Forwarded message - From: GitBox Date: Thu, Jun 23, 2022 at 7:05 AM Subject: [GitHub] [axis-axis2-java-core] joakime commented on pull request #325: Bump jetty.version from 9.4.46.v20220331 to 9.4.48.v20220622 To: joakime commented on PR

[Announce] Release of Apache Axis2 1.8.1

2022-06-14 Thread robertlazarski
The Apache Axis2 team is pleased to announce the general availability of the Axis2 1.8.1 release. The new version can be downloaded here: http://axis.apache.org/axis2/java/core/download.cgi It is also available from Maven central. -- The Apache Axis2 team

Re: [VOTE] Release Apache Axis2 1.8.1, retry #3

2022-06-13 Thread robertlazarski
This vote has passed. I'm going to publish the release. Robert On Mon, Jun 13, 2022 at 4:35 AM Nadir Amra wrote: > +1 > > > > *---* > > *Nadir Amra* > > e-mail: a...@us.ibm.com > > > > *From: *robertlaza

[VOTE] Release Apache Axis2 1.8.1, retry #3

2022-06-08 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.1 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.1 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1023/ Site:

[VOTE] Release Apache Axis2 1.8.1

2022-06-07 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.1 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.1 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts:

Re: [VOTE] Release Apache Axis2 1.8.1

2022-06-07 Thread robertlazarski
Oops, typo - sending it again. On Tue, Jun 7, 2022 at 2:09 PM robertlazarski wrote: > This is a vote to release Apache Axis2 1.8.0 > > Git tag: > https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.1 > <https://github.com/apache/axis-axis2-java-core/r

[VOTE] Release Apache Axis2 1.8.1

2022-06-07 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.0 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.1 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts:

Re: Axis 1.8.0

2022-05-16 Thread robertlazarski
p "commit 42bfd45924f995ff06807e3b6591b4a77e028d97"? > > Would you please send me the link to this commit? > > > > Thanks, Amir > > > On Friday, May 13, 2022, 11:46:17 AM EDT, robertlazarski < > robertlazar...@gmail.com> wrote: > > > StAXOMBuilder

Re: Axis 1.8.0

2022-05-13 Thread robertlazarski
StAXOMBuilder was removed from Axis2 in 2016 since it was also removed from Axiom, where it came from. See the commit below. It replaces StAXOMBuilder with CustomBuilderSupport. commit 42bfd45924f995ff06807e3b6591b4a77e028d97 Author: Andreas Veithen Date: Sat Jan 23 11:51:14 2016 +

Re: [EXT] Re: New axis2 release

2022-04-06 Thread robertlazarski
, Alexandru-Stefan wrote: > Do you mean that it`s ok if I replace gson version axis2/lib ? > > Or axis2 has to be recompiled and also the axis2.war file because of the > new jar? > > > > *From:* robertlazarski > *Sent:* Wednesday, April 6, 2022 5:22 PM > *To:* java-dev@axi

Re: New axis2 release

2022-04-06 Thread robertlazarski
Will be in a week or two actually - we are waiting on an axiom release since it fixed an important bug. That being said, there is no reason you can't update your pom.xml or WAR etc to the latest gson. BTW, as of 1.8.0 we also support Moshi as an alternative to gson since it has more recent

Re: [Axis2] Apache Axis2 Root 1.8.0 is vulnerable to Log4J issue

2022-03-21 Thread robertlazarski
As mentioned in AXIS2-6017, there ended up being 5 updates of log4j2 so the best course of action is not to wait for us but rather patch your own systems via pom.xml updates. The hold up so far on 1.8.1 is that there are lots of other recent Jira issues closed that were also important to our

The org.apache.axis2.transport.http package is in 3 modules

2022-03-21 Thread robertlazarski
All, In regards to AXIS2-4311) "Axis2 OSGi bundles have split packages", and more modern problems with module-info.java that was introduced in JDK 9, the org.apache.axis2.transport.http package is in 3 modules: ./modules/transport/http/src/org/apache/axis2/transport/http

Removing Qpid from JMS unit tests

2022-03-08 Thread robertlazarski
We support two different ways to run our Axis2 Java JMS unit tests - active mq, and qpid. Qpid is a problem because these tests were written many years ago and the ancient version used has a log4j 1.x dependency that we've been asked to remove in AXIS2-5857. Qpid went through huge changes in the

Re: [Axis] - QUERY regarding the Axis2 1.7.9

2022-02-16 Thread robertlazarski
The latest release is 1.8.0. I took a quick look around ... see the commit below for the full details. Best I can tell, it seems like what you are looking for is org.apache.axiom.util.stax.XMLStreamWriterUtils.writeDataHandler() . commit 4459e012b78572ffa04bd1000461d479bcc553fa Author: Andreas

Re: WS-SecurityPolicy 1.3 support in Apache Rampart

2021-11-30 Thread robertlazarski
Axis2 is still being developed - we just had a release this past August. There is an upcoming Rampart release on the agenda, with upgraded libs to support the latest Axis2 release. As far as adding new features to Rampart, until now there has been little interest in the community for it and not

Re: Migrating from commons-httpclient-3.1 to httpclient-4.5.13

2021-11-08 Thread robertlazarski
Someone else asked about this a few weeks ago. The support of HTTP_METHOD_PARAMS was removed in the migration to httpclient 4.x and there is no current replacement for disabling retries. Anyways, adding the httpclient 4.x method disableAutomaticRetries() before build() at the end of the axis2

Re: [VOTE] Release Apache Axis2 1.8.0

2021-08-08 Thread robertlazarski
This vote has passed. I'm going to publish the release. Robert On Mon, Aug 2, 2021 at 8:28 AM Nadir Amra wrote: > +1 > > > "robertlazarski" wrote on 08/01/2021 07:37:08 > PM: > > > From: "robertlazarski" > > To: java-dev@axis.apache.org &g

[VOTE] Release Apache Axis2 1.8.0

2021-08-01 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.0 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.0 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1022/ Site:

Re: [Axis2 Java] Fixing Travis builds

2021-05-14 Thread robertlazarski
AM robertlazarski wrote: > Thanks, it does makes sense to have everything on github. > > For the upcoming Axis2 release, we'll have to update the Axiom snapshots > to their latest release however Axis2 won't compile without Axiom > snapshots. Do we need to wait on an Axiom rel

Re: [Axis2 Java] Fixing Travis builds

2021-05-06 Thread robertlazarski
apache/axis-axis2-java-core/actions. > > Andreas > > On Mon, May 3, 2021 at 2:56 AM robertlazarski > wrote: > >> All, >> >> On the URL below: >> >> https://travis-ci.com/github/apache/axis-axis2-java-core/requests >> >> I am seeing thi

[Axis2 Java] Fixing Travis builds

2021-05-02 Thread robertlazarski
All, On the URL below: https://travis-ci.com/github/apache/axis-axis2-java-core/requests I am seeing this error: File apache/axis-axis2-java-core:.travis.yml not found on RemoteVcs Looks like we need to add a travis.yml? The builds broke about 4 months ago. Not sure why we never had one

Re: when will axis2 version 1.8.0 be released

2021-04-20 Thread robertlazarski
22 Mar 2021 at 19:15, robertlazarski > wrote: > >> I have several Jira issues assigned to me that I expect to get cleared up >> in the next couple weeks. >> >> Once that gets settled, in order to release we'd need a vote on this list >> with at least 3 +1 v

Re: when will axis2 version 1.8.0 be released

2021-03-22 Thread robertlazarski
I have several Jira issues assigned to me that I expect to get cleared up in the next couple weeks. Once that gets settled, in order to release we'd need a vote on this list with at least 3 +1 votes and no -1 votes. On Thu, Mar 18, 2021 at 11:13 PM Andrew Marlow wrote: > Hello everyone, > >

Re: xmlbeans 2.6.0 and CVE-2021-23926

2021-03-12 Thread robertlazarski
Xmlbeans 3.0.1 passed the unit tests, so I made the commit. I believe what happened here is that we rejected the Dependabot pull request to 4.x because it wouldn't build, so we missed the 3.x upgrade which at least solves the CVE. Regards, Robert On Fri, Mar 12, 2021 at 2:40 AM Andrew Marlow

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
ntextAwareObjectSupplier > to SpringServletContextObjectSupplier. I considered investigating why it > didn't work as originally set up, but unfortunately I am constrained by a > timeline. I did not try your ServletContextInitializer code snippet. > > Best, > Kevin > > On Wed,

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
For JAX-WS I think you may have just used this entry into axis2.xml? On Wed, Mar 10, 2021 at 7:07 AM robertlazarski wrote: > I see. I am looking at the docs now and am making some updates. > > Are you running JAX-WS services? How did you fix it? Did you use a > ServletContex

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
ra/browse/AXIS2-5340> as a bullet point > would be important as that seems to definitely be a notable breaking change. > > Best, > Kevin > > On Tue, Mar 9, 2021 at 3:29 PM robertlazarski > wrote: > >> I'm not really sure how the axis2.xml docs could be in regards to th

Re: build error with JDK8 to do with permissions

2021-03-10 Thread robertlazarski
I ran into similar errors the other day. Build as root until we figure this out. Andreas, I suspect this commit since the stacktrace indicates the problem originates in com.github.veithen.hermetic.HermeticSecurityManager. commit cb808543997b4e5c0fd66b1b8922374b1ae1ee7a Author: Andreas Veithen

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-09 Thread robertlazarski
to be more prominent in the documentation. > > Best, > Kevin > > On Tue, Mar 9, 2021 at 2:59 PM robertlazarski > wrote: > >> I was wondering if there are any spring boot users. I plan on writing >> some docs as it is harder than it should be. >> >> I

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-09 Thread robertlazarski
I was wondering if there are any spring boot users. I plan on writing some docs as it is harder than it should be. I was able to successfully implement it though. Where are you stuck exactly? Here's the main init code: package com.alphatheory.configuration; import com.mycompany.ATInit; import

Re: axis2, tomcat tribes and artifact relocation

2021-03-09 Thread robertlazarski
Thanks for your patience and effort on getting our attention on this. I often say there are no known CVE's in our repos, so it's great to get some community help here when vulnerabilities like this are not exposed from the Github tool Dependabot. Maybe Github has some more tools that would have

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-03-09 Thread robertlazarski
.execute(ForkedBooter.java:126) at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) On Tue, Mar 9, 2021 at 6:20 AM robertlazarski wrote: > I am seeing this issue now running the unit tests. The error is strange > since the linux "which" command for javac shows > /usr/local/jdk-11.0.2/bin/javac and

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-03-09 Thread robertlazarski
you have a full stack trace? >> >> >>> >>> On my linux mint 20 machine that file is a symbolic link to >>> /etc/maven/m2.conf, a file to which everyone has read access. >>> I have a feeling that the permissioned denied error is due to the >>>

Outstanding items for the next Axis2 release

2021-03-08 Thread robertlazarski
All, Please take this opportunity to indicate anything you would like to see in the next Axis2 release. There are no known open CVE issues in any Axis project git repo. Prompt attention to any issue raised by secur...@apache.org is the project's highest priority. For me personally, I'd like to

Re: axis2 git clone owasp build problem with com:sun:tools jar

2021-02-26 Thread robertlazarski
Are you building with JDK 11? That won't have the system dep for tools.jar, but as mentioned I didn't see it get pulled into the Axis2 build via maven. On Fri, Feb 26, 2021 at 10:23 AM robertlazarski wrote: > There are no known CVE's in git for either Axis 1.x or Axis2. > > Strangel

Re: axis2 git clone owasp build problem with com:sun:tools jar

2021-02-26 Thread robertlazarski
There are no known CVE's in git for either Axis 1.x or Axis2. Strangely I don't see that Axis2 dep error via "mvn dependency:analyze" nor do I see that jar in ~/.m2 . On Fri, Feb 26, 2021 at 12:19 AM Andrew Marlow wrote: > Hello everyone, > > I am trying to find out what CVE issues there are

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread robertlazarski
On Fri, Feb 26, 2021 at 5:57 AM Andrew Marlow wrote: > > > On Fri, 26 Feb 2021 at 15:26, robertlazarski > wrote: > >> That's a maven error beyond the scope of axis2, but anyways what do these >> commands show? >> >> ls -l /etc/maven/m2.conf >> whoami

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread robertlazarski
s outside of the build directory. Does anyone have any > ideas please? > > > On Thu, 25 Feb 2021 at 15:37, robertlazarski > wrote: > >> Axis2 1.7.9 will not build on JDK 11 for a few reasons such as the >> removal of XDoclet. >> >> The latest Axis2 trunk

Re: axis2 1.7.9 CVEs as reported by owasp: still using log4j version 1 and spring framework 2.5.1

2021-02-26 Thread robertlazarski
Spring is updated too. As an FYI, we now have "dependabot" automatically sending pull requests on deps. On Fri, Feb 26, 2021 at 5:16 AM robertlazarski wrote: > This is fixed in the Axis2 git repo as we switched entirely to log4j2. > > On Fri, Feb 26, 2021 at 1:42 AM And

Re: axis2 1.7.9 CVEs as reported by owasp: still using log4j version 1 and spring framework 2.5.1

2021-02-26 Thread robertlazarski
This is fixed in the Axis2 git repo as we switched entirely to log4j2. On Fri, Feb 26, 2021 at 1:42 AM Andrew Marlow wrote: > Hello everyone, > > I have noticed that axis2 depends on log4j version 1 and spring framework > 2.5.1. These have significant CVEs. Are there any plans for axis2 to move

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-25 Thread robertlazarski
Axis2 1.7.9 will not build on JDK 11 for a few reasons such as the removal of XDoclet. The latest Axis2 trunk from our git repo does build on JDK 11 ... maybe later too, I haven't got to that yet. git clone https://github.com/apache/axis-axis2-java-core.git Currently in git the Javac source is

Re: [Axis2] Migrating from Apache Axis 1.x to Axis2

2021-01-13 Thread robertlazarski
I saw your original message however it was right before xmas ... plus this question required me to look at the source of both projects and I don't use axis 1.x myself, I just help maintain it. Anyways, this axis2 method is pretty close.

Re: java.lang.ClassCastException: org.apache.commons.httpclient.Header cannot be cast to org.apache.axis2.context.NamedValue

2020-12-07 Thread robertlazarski
ed to use > httpclient3.HTTPSenderImpl, as we don’t even have httpclient 3.x in the > classpatch. > > Is there possibility to instruct sender to use > org.apache.axis2.transport.http.CommonsHTTPTransportSender ? > > > >Thank you > > > > *Fr

Re: java.lang.ClassCastException: org.apache.commons.httpclient.Header cannot be cast to org.apache.axis2.context.NamedValue

2020-12-07 Thread robertlazarski
I suggest upgrading your httpclient libs to the latest, and updating your axis2.xml as shown below. You can see how this error was resolved for another user in this Jira issue. https://issues.apache.org/jira/browse/AXIS2-5740 The upcoming Axis2 release will only support the latest httpclient

Re: [EXT] Re: Axis2 status (release)

2020-11-24 Thread robertlazarski
1.7.9/dist/axis2.war On Mon, Nov 23, 2020 at 11:23 PM Jipa, Alexandru-Stefan < alexandrustefan.j...@finastra.com> wrote: > Hi, > > > > And after we successfully compile axis2, what do we need to do in order to > generate axis2.war file? > > > > Thanks,

Re: Axis2 status (release)

2020-11-23 Thread robertlazarski
I figured out the OSGi problem, the fix below should allow you to build with the jar update. The goal for the next axis2 release continues to be JDK 11 compilation. We are looking at early next year for the next release. For now, JDK 8 is required for compilation though I have had no problems

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
flag or any other way to print the parent loader location? > > > > > > BR, > > *Yogev Levi* > > Senior Software Engineer > > *TEOCO Ltd.* > > c: > > +972 52 4455 708 > > p: > > +972 3 9269752 > > *E-mail: yogev.l...@teoco.com * > >

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
gt; -Djavax.xml.parsers.SAXParserFactory=org.apache.xerces.jaxp.SAXParserFactoryImpl > -Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl > generate > C:\Users\leviy\Desktop\save\antOutput3.txt > > > > BR, > > *Yogev Levi* > > S

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
3) -Djavax.xml.parsers.SAXParserFactory=org.apache.xerces.jaxp.SAXParserFactoryImpl -Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl On Thu, Oct 15, 2020 at 1:41 AM robertlazarski wrote: > Looks like you are running the axis2 client in Weblo

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
gt; > > > BR, > > *Yogev Levi* > > Senior Software Engineer > > *TEOCO Ltd.* > > c: > > +972 52 4455 708 > > p: > > +972 3 9269752 > > *E-mail: yogev.l...@teoco.com * > > www.teoco.com > > > > > > *From:* Levi, Yogev > *

Re: axis2-1.7.9 running with invalid JAXP

2020-10-14 Thread robertlazarski
I suggest using these flags to ant, then paste the entire output: ant -verbose -debug -Djaxp.debug=1 Robert On Wed, Oct 14, 2020 at 4:08 AM Levi, Yogev wrote: > > > Hi > > > > I'm trying to generate axis2-1.7.9 stub files from wsdl file by calling > axis2

Re: Upgrading manually xalan 2.7.2 and commons fileupload 1.4 in axis2-1.7.9

2020-10-09 Thread robertlazarski
clean install war: axis-axis2-java-core/modules/distribution/target/axis2-1.8.0-SNAPSHOT/dist/axis2.war On Thu, Oct 8, 2020 at 2:22 PM robertlazarski wrote: > There is some type of OSGI issue in Felix - I am new to both as I never > used them personally. > > One of our committers

Re: Upgrading manually xalan 2.7.2 and commons fileupload 1.4 in axis2-1.7.9

2020-10-08 Thread robertlazarski
There is some type of OSGI issue in Felix - I am new to both as I never used them personally. One of our committers, apparently ran into this issue. I am trying to set the right break point since the original Exception isn't getting logged. I still haven't figured it out, but I am working on it.

Re: [EXT] [jira] [Commented] (AXIS2-5984) Switch to org.glassfish.jaxb artifacts?

2020-09-14 Thread robertlazarski
< alexandrustefan.j...@finastra.com> wrote: > Will affect this upgrade the support for example to openjdk 1.8 versions? > > > > Stefan > > > > *From:* robertlazarski > *Sent:* Monday, September 14, 2020 4:35 PM > *To:* java-dev@axis.apache.org > *Subject:

Re: [EXT] [jira] [Commented] (AXIS2-5984) Switch to org.glassfish.jaxb artifacts?

2020-09-14 Thread robertlazarski
gt; possible? > > > > Stefan > > > > *From:* robertlazarski > *Sent:* Monday, September 14, 2020 4:13 PM > *To:* java-dev@axis.apache.org > *Subject:* Re: [EXT] [jira] [Commented] (AXIS2-5984) Switch to > org.glassfish.jaxb artifacts? > > > > commons fileup

Re: [EXT] [jira] [Commented] (AXIS2-5984) Switch to org.glassfish.jaxb artifacts?

2020-09-14 Thread robertlazarski
commons fileupload will definitely be upgraded to 1.4, I tried a few weeks ago but ran into a problem in the OSGI module. I'll be looking more into that code soon. Robert On Sun, Sep 13, 2020 at 10:16 PM Jipa, Alexandru-Stefan < alexandrustefan.j...@finastra.com> wrote: > Hi, > > Thank you for

Re: Axis2-1.7.9 upgrade libs

2020-09-11 Thread robertlazarski
About dropping in new versions of commons-fileupdate and xalan into your webapp for example ... sure, I'd expect no problems. On Fri, Sep 11, 2020 at 5:01 AM robertlazarski wrote: > Go ahead and create a Jira issue for Axis2, and list the jar's you'd like > updated. > > I trie

Re: Axis2-1.7.9 upgrade libs

2020-09-11 Thread robertlazarski
Go ahead and create a Jira issue for Axis2, and list the jar's you'd like updated. I tried to upgrade commons-fileupload about a week ago actually. I ran into problems with our OSGI module since it bundles some specific versions. I'll be looking more into that soon. The goal for the next release

Re: External services (Travis, etc.) for Git repos

2020-06-09 Thread robertlazarski .
are? Regards, Robert On Mon, Jun 1, 2020 at 6:11 AM robertlazarski . wrote: > > > On Wed, May 27, 2020 at 12:50 PM Bill Blough > wrote: > >> >> On Mon, Apr 20, 2020 at 08:16:24PM +0100, Andreas Veithen wrote: >> > On Mon, Apr 20, 2020 at 7:41 PM Bill Blough &

Re: External services (Travis, etc.) for Git repos

2020-06-01 Thread robertlazarski .
On Wed, May 27, 2020 at 12:50 PM Bill Blough wrote: > > On Mon, Apr 20, 2020 at 08:16:24PM +0100, Andreas Veithen wrote: > > On Mon, Apr 20, 2020 at 7:41 PM Bill Blough > wrote: > > > > > As I understand it, we'll have to request that external services, such > > > as Travis, be enabled for the

Re: Git Migration Status Update - Axis1/Java and Axis1/C done

2020-04-03 Thread robertlazarski .
Axis 1 java hasn't been released since 2006, though we continue to apply security fixes and community supplied patches to it. AFAIK no one is using Axis 1 c, though I suppose we will still allow git clones of it. Regards, Robert On Fri, Apr 3, 2020 at 9:20 AM Giorgio Zoppi wrote: > Hi Bill, >

Re: Git Migration Status Update - Axis1/Java and Axis1/C done

2020-04-01 Thread robertlazarski .
Thanks Bill! I did a clone on the Axis1 Java repo and it has all the latest commits, looks great! We do seem to have the old out of sync Axis1 Java site on github still - so we have two sites. I suppose we should simply remove all the old sites for each project since its around a year out of sync

Re: Move from SVN to git? (Was: Re: Axis2 github mirror SVN sync problems and Travis nightly builds)

2020-03-19 Thread robertlazarski .
Bill, thanks for keeping the conversation going - and sorry for the delay as its been a busy week for me. Since you volunteered, please open a ticket with infra. The existing svn to git mirror stopped working and effectively broke the Java nightly builds, I see only an upside. Looks like we

Axis2 github mirror SVN sync problems and Travis nightly builds

2020-03-12 Thread robertlazarski .
Andreas, I believe you may have set up the github mirror below some time ago? https://github.com/apache/axis2-java All commits on the Axis2 SVN trunk stopped syncing with Github about a year ago. I am asking about this because the Travis nightly builds seem to be Github based and they also

Re: [Axis2]

2020-02-13 Thread robertlazarski .
I reviewed your code and logs, can you please post your services.xml for completeness? Its probably correct since your module is getting invoked. Its been a while since I looked at this module code, I contributed the soap monitor module many years ago. So it seems the messagecontext is not null,

Re: [Axis2]

2020-01-30 Thread robertlazarski .
Hard to say without seeing your code. Try enabling debug logging. I suggest double checking your axis2.xml config, using the logging module or soap monitor as a reference. Regards, Robert On Thu, Jan 30, 2020 at 12:15 AM Faizan Khan wrote: > > Hi I have implemented my own module with handler

Re: axis2 codegen error: No such file or directory: databindsupporter

2019-12-17 Thread robertlazarski .
d(SingleThreadedBuilder.java:51) > at > org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:120) > at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:355) > at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:155) > at org.apache.maven.cli.

Re: axis2 codegen error: No such file or directory: databindsupporter

2019-12-16 Thread robertlazarski .
The absolute path of the xsl reference may be a problem, I suggest removing the leading "/" and seeing if that helps. On Mon, Dec 16, 2019 at 6:50 AM robertlazarski . wrote: > > Somehow it seems axis2-xmlbeans-1.7.9.jar is not in the same > classloader

Re: axis2 codegen error: No such file or directory: databindsupporter

2019-12-16 Thread robertlazarski .
1.7.9 with the > 1.4.1 version, the build passed this step but failed later on, again with a > message relating to a null URL object. > > > ~~ > Michael FRYARS > mfry...@hotmail.com > ~~ > > __

Re: axis2 codegen error: No such file or directory: databindsupporter

2019-12-05 Thread robertlazarski .
false​ > [DEBUG] (f) syncMode = sync​ > [DEBUG] (f) targetSourceFolderLocation = src​ > [DEBUG] (f) unpackClasses = true​ > [DEBUG] (f) unwrap = false​ > [DEBUG] (f) wsdlFile = > /var/lib/jenkins/workspace/spf_core_Webservices_develop/MyAppWsAuthenticateClient/../MyAppWsComm

Re: axis2 codegen error: No such file or directory: databindsupporter

2019-12-04 Thread robertlazarski .
That's a very similar environment as my day job, does the dir exist? My guess is the path is wrong in your config. Less likely but possible, is it exists though without read access somehow. /var/lib/jenkins/workspace/spf_core_Webservices_develop/databindsupporter Regards, Robert On Tue, Dec 3,

Re: RE: [Axis2] - Is Axis2 version 1.4 affected by RFC 2818?

2019-02-11 Thread robertlazarski
On Mon, Feb 11, 2019 at 4:03 AM Herring, Bruce (T55B) < bruce.herr...@hii-nns.com> wrote: > Please take bruce.herr...@hii-nns.com off your e-mail replies. > > You are subscribed to the Axis2 dev list. You may want to unsubscribe. Regards, Robert > If you are not the addressee, please inform us

Re: [Axis2] - Is Axis2 version 1.4 affected by RFC 2818?

2019-02-10 Thread robertlazarski
Axis2 1.4 is very old and is unsupported. The latest Axis2 allows you to configure httpclient4 instead of httpclient3. That might help. Is your SSL cert self signed? It may be misconfigured. Regards, Robert On Thu, Feb 7, 2019 at 7:12 PM wrote: > Hello Team, > > > > We are using Axis2 1.4 to

Re: [VOTE] Release Axis2 1.7.9

2018-11-19 Thread robertlazarski
All, we still need votes. Lets give Andreas the support he needs for this release. Regards, Robert On Sun, Nov 18, 2018 at 1:48 AM Kishanthan Thangarajah < kshanth2...@gmail.com> wrote: > +1 > > Thanks, > Kishanthan > > On Sat, Nov 17, 2018 at 1:48 AM Andreas Veithen > wrote: > >> This is a

Re: [VOTE] Release Axis2 1.7.9

2018-11-16 Thread robertlazarski
On Fri, Nov 16, 2018 at 1:18 PM Andreas Veithen wrote: > This is a vote to release Apache Axis2 1.7.9. > > SVN tag: http://svn.apache.org/repos/asf/axis/axis2/java/core/tags/v1.7.9/ > Maven artifacts: > https://repository.apache.org/content/repositories/orgapacheaxis2-1019/ > Distributions: >

Re: [Axis2] Secure Cookie not returned to WebServer

2018-11-13 Thread robertlazarski
On Tue, Nov 13, 2018 at 4:47 AM R. Lapsien wrote: > Secure Cookie not returned to WebServer > > > I'm accessing a WebService on an BEA Server from a Java client using AXIS2 > 1.7.8 > > As can be seen in the SSL trace AXIS2 is not returning the secure cookie > (named '_WL_AUTHCOOKIE_JSESSIONID')

  1   2   >