You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Alan Cabrera (JIRA)" <ji...@codehaus.org> on 2006/04/30 18:31:19 UTC
[jira] Created: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Maven should check the contents of the POMs and jars that it downloads
----------------------------------------------------------------------
Key: MNG-2259
URL: http://jira.codehaus.org/browse/MNG-2259
Project: Maven 2
Type: Bug
Versions: 2.0.4
Reporter: Alan Cabrera
Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Updated: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "John Casey (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=all ]
John Casey updated MNG-2259:
----------------------------
Fix Version: 2.1
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
> Fix For: 2.1
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Jason van Zyl (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=204352#action_204352 ]
Jason van Zyl commented on MNG-2259:
------------------------------------
Use strict checksum validation. One day when all the checksums are valid.
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2 & 3
> Issue Type: Bug
> Components: Artifacts and Repositories
> Affects Versions: 2.0.4
> Reporter: Alan Cabrera
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Brett Porter updated MNG-2259:
------------------------------
Component/s: Artifacts and Repositories
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Issue Type: Bug
> Components: Artifacts and Repositories
> Affects Versions: 2.0.4
> Reporter: Alan Cabrera
> Fix For: 2.1.x
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Rafal Rusin (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=217066#action_217066 ]
Rafal Rusin commented on MNG-2259:
----------------------------------
I used -C option. It worked well.
I'd like to use this option and enable checksumPolicy on specified repository to warn. Is this possible?
<repository>
<id>servicemix</id>
<name>Apache ServiceMix Repository</name>
<url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>warn</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
With -C option, I get "Failed to resolve artifact"
net.sf.saxon:saxon:jar:9.1.0.8
This artifact doesn't have checksum.
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2 & 3
> Issue Type: Bug
> Components: Artifacts and Repositories
> Affects Versions: 2.0.4
> Reporter: Alan Cabrera
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Jason van Zyl (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jason van Zyl closed MNG-2259.
------------------------------
Resolution: Won't Fix
Fix Version/s: (was: 3.x)
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2 & 3
> Issue Type: Bug
> Components: Artifacts and Repositories
> Affects Versions: 2.0.4
> Reporter: Alan Cabrera
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Alan Cabrera (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=comments#action_64462 ]
Alan Cabrera commented on MNG-2259:
-----------------------------------
FYI. I was at the airport and it filled the POMs w/ T-Moble login screens.
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Updated: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=all ]
Carlos Sanchez updated MNG-2259:
--------------------------------
Comment: was deleted
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=comments#action_64439 ]
Carlos Sanchez commented on MNG-2259:
-------------------------------------
it does through the md5 and sha1 checksums
{noformat}
mvn -?
-C,--strict-checksums Fail the build if checksums don't match
{noformat}
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=comments#action_64450 ]
Brett Porter commented on MNG-2259:
-----------------------------------
this wil be the default in 2.1, once the repository checksums are cleaned up and regularly validated
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
[jira] Commented: (MNG-2259) Maven should check the contents of the
POMs and jars that it downloads
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-2259?page=comments#action_64438 ]
Carlos Sanchez commented on MNG-2259:
-------------------------------------
it does through the md5 and sha1 checksums
mvn -?
-C,--strict-checksums Fail the build if checksums don't match
> Maven should check the contents of the POMs and jars that it downloads
> ----------------------------------------------------------------------
>
> Key: MNG-2259
> URL: http://jira.codehaus.org/browse/MNG-2259
> Project: Maven 2
> Type: Bug
> Versions: 2.0.4
> Reporter: Alan Cabrera
>
>
> Sometimes they are corrupt.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira