[maven] 01/01: Use a secure connection to download artifacts from Maven Central (Closes: #779331)

[Emmanuel Bourg]

This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a commit to branch wheezy
in repository maven.

commit 49b250dc8f0ad794a7897abc45b9221555599317
Author: Emmanuel Bourg <ebourg at apache.org>
Date:   Fri Feb 27 18:18:44 2015 +0100

    Use a secure connection to download artifacts from Maven Central (Closes: #779331)
---
 debian/changelog                                |  8 ++++++
 debian/patches/secure-maven-central-access.diff | 33 +++++++++++++++++++++++++
 debian/patches/series                           |  1 +
 3 files changed, 42 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 4cb5b11..369df0a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+maven (3.0.4-3+deb7u1) stable; urgency=high
+
+  * Team upload.
+  * Use a secure connection by default to download artifacts
+    from the Maven Central repository (Closes: #779331)
+
+ -- Emmanuel Bourg <ebourg at apache.org>  Fri, 27 Feb 2015 17:56:07 +0100
+
 maven (3.0.4-3) unstable; urgency=low
 
   * Use wagon 2.x to provide http/webdav access.
diff --git a/debian/patches/secure-maven-central-access.diff b/debian/patches/secure-maven-central-access.diff
new file mode 100644
index 0000000..1bce53d
--- /dev/null
+++ b/debian/patches/secure-maven-central-access.diff
@@ -0,0 +1,33 @@
+Description: Download artifacts from Maven central using https by default
+Origin: backport, https://github.com/apache/maven/commit/9216191
+--- a/maven-core/src/main/java/org/apache/maven/repository/RepositorySystem.java
++++ b/maven-core/src/main/java/org/apache/maven/repository/RepositorySystem.java
+@@ -51,7 +51,7 @@
+ 
+     final String DEFAULT_REMOTE_REPO_ID = "central";
+ 
+-    final String DEFAULT_REMOTE_REPO_URL = "http://repo.maven.apache.org/maven2";
++    final String DEFAULT_REMOTE_REPO_URL = "https://repo.maven.apache.org/maven2";
+ 
+     Artifact createArtifact( String groupId, String artifactId, String version, String packaging );
+ 
+--- a/maven-model-builder/src/main/resources/org/apache/maven/model/pom-4.0.0.xml
++++ b/maven-model-builder/src/main/resources/org/apache/maven/model/pom-4.0.0.xml
+@@ -27,7 +27,7 @@
+     <repository>
+       <id>central</id>
+       <name>Central Repository</name>
+-      <url>http://repo.maven.apache.org/maven2</url>
++      <url>https://repo.maven.apache.org/maven2</url>
+       <layout>default</layout>
+       <snapshots>
+         <enabled>false</enabled>
+@@ -39,7 +39,7 @@
+     <pluginRepository>
+       <id>central</id>
+       <name>Central Repository</name>
+-      <url>http://repo.maven.apache.org/maven2</url>
++      <url>https://repo.maven.apache.org/maven2</url>
+       <layout>default</layout>
+       <snapshots>
+         <enabled>false</enabled>
diff --git a/debian/patches/series b/debian/patches/series
index b1afcff..b757b42 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -4,3 +4,4 @@ dep_versions.diff
 add_dependencies.diff
 force_java15_compiler.diff
 no_maven_assembly.diff
+secure-maven-central-access.diff

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/maven.git