[jira] [Commented] (NIFI-6454) Upgrade Spring beans dependency to take advantage of mapped HTTPS XSD resources to embedded files

["Andy LoPresto (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-6454?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16888228#comment-16888228 ] 

Andy LoPresto commented on NIFI-6454:
-------------------------------------

The specific information is in Peter's comment here: https://issues.apache.org/jira/browse/NIFI-6439?focusedCommentId=16888196&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-16888196

> Upgrade Spring beans dependency to take advantage of mapped HTTPS XSD resources to embedded files
> -------------------------------------------------------------------------------------------------
>
>                 Key: NIFI-6454
>                 URL: https://issues.apache.org/jira/browse/NIFI-6454
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Core Framework
>    Affects Versions: 1.10.0
>            Reporter: Andy LoPresto
>            Priority: Major
>              Labels: dependency, security, spring
>
> As discovered in NIFI-6439, the change for the Spring XSD dependencies from HTTP to HTTPS URLs blocks the application from running when disconnected from the internet. This is due to the plain HTTP URLs being mapped in an embedded properties file to embedded local XSD files, but the HTTPS URLs not being mapped. 
> As reported by [~patricker], as of May 2019, Spring had updated their mapping file to include the HTTPS URLs. 
> Once this upgrade is complete, the reversion of the URL protocols done in PR 3590 can be restored. 



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)