[jira] [Comment Edited] (RAT-253) Check license link with HTTPS uri failed

["Philipp Ottlinger (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RAT-253?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16846135#comment-16846135 ] 

Philipp Ottlinger edited comment on RAT-253 at 5/22/19 6:37 PM:
----------------------------------------------------------------

The man in the middle attack is for/against downloading from Maven repositories - this has nothing to do with license headers ;)


was (Author: hugo.hirsch):
The man in the middle attack is for downloading from Maven repositories - this has nothing to do with license headers ;)

> Check license link with HTTPS uri failed
> ----------------------------------------
>
>                 Key: RAT-253
>                 URL: https://issues.apache.org/jira/browse/RAT-253
>             Project: Apache Rat
>          Issue Type: Bug
>    Affects Versions: 0.13
>            Reporter: Francois Papon
>            Priority: Major
>
> Hi,
> When using a *https* uri in the license header made the maven *apache-rat:check* goal failed.
> It works well when using *http* uri.
> In this example:
> SUCCESS
> {code:java}
> http://www.apache.org/licenses/LICENSE-2.0{code}
> FAILED
> {code:java}
> https://www.apache.org/licenses/LICENSE-2.0{code}
>  
>  
> {code:java}
> *****************************************************
>  Files with Apache License headers will be marked AL
>  Binary files (which do not require any license headers) will be marked B
>  Compressed archives will be marked A
>  Notices, licenses etc. will be marked N
>  N NOTICE
>  !????? pom.xml
>  N LICENSE
>  N RELEASE-NOTES
>  AL shiro.doap.rdf
>  N README
>  B src/site/resources/images/asf_logo.png
>  B src/site/resources/images/apache-shiro-logo.png
>  AL src/site/site.xml
>  AL src/owasp-suppression.xml
>  AL src/license/header_format.xml
>  AL src/license/header.txt
>  
> *****************************************************
>  Printing headers for text files without a valid license header...
>  
> =====================================================
> == File: pom.xml
> =====================================================
> <?xml version="1.0" encoding="UTF-8"?>
> <!--
>  ~ Licensed to the Apache Software Foundation (ASF) under one
>  ~ or more contributor license agreements. See the NOTICE file
>  ~ distributed with this work for additional information
>  ~ regarding copyright ownership. The ASF licenses this file
>  ~ to you under the Apache License, Version 2.0 (the
>  ~ "License"); you may not use this file except in compliance
>  ~ with the License. You may obtain a copy of the License at
>  ~
>  ~ https://www.apache.org/licenses/LICENSE-2.0
>  ~
>  ~ Unless required by applicable law or agreed to in writing,
>  ~ software distributed under the License is distributed on an
>  ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
>  ~ KIND, either express or implied. See the License for the
>  ~ specific language governing permissions and limitations
>  ~ under the License.
>  -->
> <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/maven-v4_0_0.xsd">
>  <modelVersion>4.0.0</modelVersion>
>  <!-- pick up Apache distributionManagement for releasing (snapshots, releases, etc): -->
>  <parent>
>  <groupId>org.apache</groupId>
>  <artifactId>apache</artifactId>
>  <version>21</version>
>  </parent>
>  <groupId>org.apache.shiro</groupId>
>  <artifactId>shiro-root</artifactId>
>  <packaging>pom</packaging>
>  <version>1.5.0-SNAPSHOT</version>{code}
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)