You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spark.apache.org by pw...@apache.org on 2014/08/07 03:14:50 UTC
git commit: SPARK-2879 [BUILD] Use HTTPS to access Maven Central and
other repos
Repository: spark
Updated Branches:
refs/heads/master 17caae48b -> 4201d2711
SPARK-2879 [BUILD] Use HTTPS to access Maven Central and other repos
Maven Central has just now enabled HTTPS access for everyone to Maven Central (http://central.sonatype.org/articles/2014/Aug/03/https-support-launching-now/) This is timely, as a reminder of how easily an attacker can slip malicious code into a build that's downloading artifacts over HTTP (http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/).
In the meantime, it looks like the Spring repo also now supports HTTPS, so can be used this way too.
I propose to use HTTPS to access these repos.
Author: Sean Owen <sr...@gmail.com>
Closes #1805 from srowen/SPARK-2879 and squashes the following commits:
7043a8e [Sean Owen] Use HTTPS for Maven Central libs and plugins; use id 'central' to override parent properly; use HTTPS for Spring repo
Project: http://git-wip-us.apache.org/repos/asf/spark/repo
Commit: http://git-wip-us.apache.org/repos/asf/spark/commit/4201d271
Tree: http://git-wip-us.apache.org/repos/asf/spark/tree/4201d271
Diff: http://git-wip-us.apache.org/repos/asf/spark/diff/4201d271
Branch: refs/heads/master
Commit: 4201d2711cd20a2892c40eb11102f73c2f826b2e
Parents: 17caae4
Author: Sean Owen <sr...@gmail.com>
Authored: Wed Aug 6 18:13:35 2014 -0700
Committer: Patrick Wendell <pw...@gmail.com>
Committed: Wed Aug 6 18:13:35 2014 -0700
----------------------------------------------------------------------
pom.xml | 15 ++++++++++++---
1 file changed, 12 insertions(+), 3 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/spark/blob/4201d271/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 4ab027b..76bf6d8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -143,11 +143,11 @@
<repositories>
<repository>
- <id>maven-repo</id>
+ <id>central</id>
<!-- This should be at top, it makes maven try the central repo first and then others and hence faster dep resolution -->
<name>Maven Repository</name>
<!-- HTTPS is unavailable for Maven Central -->
- <url>http://repo.maven.apache.org/maven2</url>
+ <url>https://repo.maven.apache.org/maven2</url>
<releases>
<enabled>true</enabled>
</releases>
@@ -213,7 +213,7 @@
<repository>
<id>spring-releases</id>
<name>Spring Release Repository</name>
- <url>http://repo.spring.io/libs-release</url>
+ <url>https://repo.spring.io/libs-release</url>
<releases>
<enabled>true</enabled>
</releases>
@@ -222,6 +222,15 @@
</snapshots>
</repository>
</repositories>
+ <pluginRepositories>
+ <pluginRepository>
+ <id>central</id>
+ <url>https://repo1.maven.org/maven2</url>
+ <releases>
+ <enabled>true</enabled>
+ </releases>
+ </pluginRepository>
+ </pluginRepositories>
<dependencyManagement>
<dependencies>
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org