[maven2-core] 01/01: Use a secure connection to download artifacts from Maven Central (Closes: #779338)

[Emmanuel Bourg]

This is an automated email from the git hooks/post-receive script.

ebourg-guest pushed a commit to branch wheezy
in repository maven2-core.

commit 5cc7b6043651fcdc667dddc3645fcec5c41fb130
Author: Emmanuel Bourg <ebourg at apache.org>
Date:   Fri Feb 27 14:19:32 2015 +0100

    Use a secure connection to download artifacts from Maven Central (Closes: #779338)
---
 debian/changelog                                   |  8 ++++++++
 .../patches/0005-secure-maven-central-access.patch | 22 ++++++++++++++++++++++
 debian/patches/series                              |  1 +
 3 files changed, 31 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index b4493e1..c6a68fd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+maven2-core (2.2.1-8+deb7u1) wheezy-proposed-updates; urgency=high
+
+  * Team upload.
+  * Use a secure connection by default to download artifacts
+    from the Maven Central repository (Closes: #779338)
+
+ -- Emmanuel Bourg <ebourg at apache.org>  Tue, 08 Sep 2015 09:41:37 +0200
+
 maven2-core (2.2.1-8) unstable; urgency=low
 
   * Team upload.
diff --git a/debian/patches/0005-secure-maven-central-access.patch b/debian/patches/0005-secure-maven-central-access.patch
new file mode 100644
index 0000000..6eda048
--- /dev/null
+++ b/debian/patches/0005-secure-maven-central-access.patch
@@ -0,0 +1,22 @@
+Description: Download artifacts from Maven central using https by default
+Origin: backport, https://github.com/apache/maven/commit/9216191
+--- a/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
++++ b/maven-project/src/main/resources/org/apache/maven/project/pom-4.0.0.xml
+@@ -27,7 +27,7 @@
+       <id>central</id>
+       <name>Maven Repository Switchboard</name>
+       <layout>default</layout>
+-      <url>http://repo1.maven.org/maven2</url>
++      <url>https://repo1.maven.org/maven2</url>
+       <snapshots>
+         <enabled>false</enabled>
+       </snapshots>
+@@ -38,7 +38,7 @@
+     <pluginRepository>
+       <id>central</id>
+       <name>Maven Plugin Repository</name>
+-      <url>http://repo1.maven.org/maven2</url>
++      <url>https://repo1.maven.org/maven2</url>
+       <layout>default</layout>
+       <snapshots>
+         <enabled>false</enabled>
diff --git a/debian/patches/series b/debian/patches/series
index b8a6a90..3debc69 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 0001-remove-webdav-support.patch
 0002-update-plugin-versions.patch
 0003-update-plexus-utils.patch
+0005-secure-maven-central-access.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/maven2-core.git