Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-2809

mirror shibboleth maven repo in the artifactory

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      I am updating the SAML plugin to work with Jenkins Core 2.266, updating the pac4j library I need also to update the opensaml. The issue is that opensaml >3.3x is not in the Maven Central, the latest version in Maven Central is 3.3.0 from 2017, it seems related to security reasons https://wiki.shibboleth.net/confluence/display/DEV/Use+of+Maven+Central

      My request is to mirror this repository in Jenkins artifact to have the latest version of that library available. I guess that with https://build.shibboleth.net/nexus/content/groups/public/org/opensaml/ is enough.

      This is the maven repo

          <repository>
            <id>shib-release</id>
            <url>https://build.shibboleth.net/nexus/content/groups/public</url>
            <snapshots>
              <enabled>false</enabled>
            </snapshots>
            <releases>
              <enabled>true</enabled>
            </releases>
          </repository>
      

        Attachments

        1. opensaml-core-3.4.3.jar
          178 kB
        2. opensaml-messaging-api-3.4.3.jar
          55 kB
        3. opensaml-messaging-impl-3.4.3.jar
          19 kB
        4. opensaml-profile-api-3.4.3.jar
          30 kB
        5. opensaml-profile-impl-3.4.3.jar
          27 kB
        6. opensaml-saml-api-3.4.3.jar
          398 kB
        7. opensaml-saml-impl-3.4.3.jar
          1.11 MB
        8. opensaml-security-api-3.4.3.jar
          65 kB
        9. opensaml-security-impl-3.4.3.jar
          109 kB
        10. opensaml-soap-api-3.4.3.jar
          166 kB
        11. opensaml-soap-impl-3.4.3.jar
          394 kB
        12. opensaml-storage-api-3.4.3.jar
          23 kB
        13. opensaml-storage-impl-3.4.3.jar
          73 kB
        14. opensaml-xmlsec-api-3.4.3.jar
          205 kB
        15. opensaml-xmlsec-impl-3.4.3.jar
          290 kB
        16. xmlsectool-2.0.0.jar
          38 kB

          Issue Links

            Activity

            Hide
            danielbeck Daniel Beck added a comment -

            James NordSo should I revert these changes or what?

            Show
            danielbeck Daniel Beck added a comment - James Nord So should I revert these changes or what?
            Hide
            danielbeck Daniel Beck added a comment -

            Looks like https://build.shibboleth.net/nexus/content/repositories/releases/ would be the real repo to use with only the stuff we want?

            Show
            danielbeck Daniel Beck added a comment - Looks like https://build.shibboleth.net/nexus/content/repositories/releases/ would be the real repo to use with only the stuff we want?
            Hide
            teilo James Nord added a comment -

            Daniel Beck hopefully it would be, but at the same time there is no record of what they are deploying to "3rd party" could just be stuff from central, at the same time could include things they have pathced or are not on central.

            Making changes to CB repositories and am likely to not include this repo at all and then shift the saml plugin to use the v4 API from central (subject to inspection it is actually the same thing from the same publisher)

            Show
            teilo James Nord added a comment - Daniel Beck hopefully it would be, but at the same time there is no record of what they are deploying to "3rd party" could just be stuff from central, at the same time could include things they have pathced or are not on central. Making changes to CB repositories and am likely to not include this repo at all and then shift the saml plugin to use the v4 API from central (subject to inspection it is actually the same thing from the same publisher)
            Hide
            danielbeck Daniel Beck added a comment -

            Well yeah, and the /releases/ repo would not have the thirdparty stuff, no?

            Show
            danielbeck Daniel Beck added a comment - Well yeah, and the /releases/ repo would not have the thirdparty stuff, no?
            Hide
            teilo James Nord added a comment -

            Correct, my point was that I do not know if the libraries have runtime dependencies on something inside https://build.shibboleth.net/nexus/content/repositories/thirdparty/

            Show
            teilo James Nord added a comment - Correct, my point was that I do not know if the libraries have runtime dependencies on something inside https://build.shibboleth.net/nexus/content/repositories/thirdparty/

              People

              Assignee:
              danielbeck Daniel Beck
              Reporter:
              ifernandezcalvo Ivan Fernandez Calvo
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: