[maven2-core] 38/38: Use a secure connection to download artifacts from Maven Central (Closes: #779338)

[Emmanuel Bourg]

This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a commit to branch master
in repository maven2-core.

commit 709b43256e16c4d048e5858bc06e8e1b76afb3d1
Author: Emmanuel Bourg <ebourg at apache.org>
Date:   Fri Feb 27 14:19:32 2015 +0100

    Use a secure connection to download artifacts from Maven Central (Closes: #779338)
---
 debian/changelog                                   |  5 ++++-
 .../patches/0005-secure-maven-central-access.patch | 22 ++++++++++++++++++++++
 debian/patches/series                              |  1 +
 3 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 90c8a9f..7dbf4c9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,8 @@
-maven2-core (2.2.1-17) UNRELEASED; urgency=medium
+maven2-core (2.2.1-17) unstable; urgency=high
 
+  * Team upload.
+  * Use a secure connection by default to download artifacts
+    from the Maven Central repository (Closes: #779338)
   * Moved the package to Git
 
  -- Emmanuel Bourg <ebourg at apache.org>  Fri, 27 Feb 2015 11:46:36 +0100
diff --git a/debian/patches/0005-secure-maven-central-access.patch b/debian/patches/0005-secure-maven-central-access.patch
new file mode 100644
index 0000000..6eda048
--- /dev/null
+++ b/debian/patches/0005-secure-maven-central-access.patch
@@ -0,0 +1,22 @@
+Description: Download artifacts from Maven central using https by default
+Origin: backport, https://github.com/apache/maven/commit/9216191
+--- a/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
++++ b/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
+@@ -27,7 +27,7 @@
+       <id>central</id>
+       <name>Maven Repository Switchboard</name>
+       <layout>default</layout>
+-      <url>http://repo1.maven.org/maven2</url>
++      <url>https://repo1.maven.org/maven2</url>
+       <snapshots>
+         <enabled>false</enabled>
+       </snapshots>
+@@ -38,7 +38,7 @@
+     <pluginRepository>
+       <id>central</id>
+       <name>Maven Plugin Repository</name>
+-      <url>http://repo1.maven.org/maven2</url>
++      <url>https://repo1.maven.org/maven2</url>
+       <layout>default</layout>
+       <snapshots>
+         <enabled>false</enabled>
diff --git a/debian/patches/series b/debian/patches/series
index 54e4fca..1b06805 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,3 +2,4 @@
 0002-update-plugin-versions.patch
 0003-update-plexus-utils.patch
 0004-remove-backport-util-concurrent.patch
+0005-secure-maven-central-access.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/maven2-core.git