[maven2-core] 38/38: Use a secure connection to download artifacts from Maven Central (Closes: #779338)
Emmanuel Bourg
ebourg-guest at moszumanska.debian.org
Fri Feb 27 13:24:23 UTC 2015
This is an automated email from the git hooks/post-receive script.
ebourg-guest pushed a commit to branch master
in repository maven2-core.
commit 709b43256e16c4d048e5858bc06e8e1b76afb3d1
Author: Emmanuel Bourg <ebourg at apache.org>
Date: Fri Feb 27 14:19:32 2015 +0100
Use a secure connection to download artifacts from Maven Central (Closes: #779338)
---
debian/changelog | 5 ++++-
.../patches/0005-secure-maven-central-access.patch | 22 ++++++++++++++++++++++
debian/patches/series | 1 +
3 files changed, 27 insertions(+), 1 deletion(-)
diff --git a/debian/changelog b/debian/changelog
index 90c8a9f..7dbf4c9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,8 @@
-maven2-core (2.2.1-17) UNRELEASED; urgency=medium
+maven2-core (2.2.1-17) unstable; urgency=high
+ * Team upload.
+ * Use a secure connection by default to download artifacts
+ from the Maven Central repository (Closes: #779338)
* Moved the package to Git
-- Emmanuel Bourg <ebourg at apache.org> Fri, 27 Feb 2015 11:46:36 +0100
diff --git a/debian/patches/0005-secure-maven-central-access.patch b/debian/patches/0005-secure-maven-central-access.patch
new file mode 100644
index 0000000..6eda048
--- /dev/null
+++ b/debian/patches/0005-secure-maven-central-access.patch
@@ -0,0 +1,22 @@
+Description: Download artifacts from Maven central using https by default
+Origin: backport, https://github.com/apache/maven/commit/9216191
+--- a/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
++++ b/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
+@@ -27,7 +27,7 @@
+ <id>central</id>
+ <name>Maven Repository Switchboard</name>
+ <layout>default</layout>
+- <url>http://repo1.maven.org/maven2</url>
++ <url>https://repo1.maven.org/maven2</url>
+ <snapshots>
+ <enabled>false</enabled>
+ </snapshots>
+@@ -38,7 +38,7 @@
+ <pluginRepository>
+ <id>central</id>
+ <name>Maven Plugin Repository</name>
+- <url>http://repo1.maven.org/maven2</url>
++ <url>https://repo1.maven.org/maven2</url>
+ <layout>default</layout>
+ <snapshots>
+ <enabled>false</enabled>
diff --git a/debian/patches/series b/debian/patches/series
index 54e4fca..1b06805 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,3 +2,4 @@
0002-update-plugin-versions.patch
0003-update-plexus-utils.patch
0004-remove-backport-util-concurrent.patch
+0005-secure-maven-central-access.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/maven2-core.git
More information about the pkg-java-commits
mailing list