You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@bigtop.apache.org by "Olaf Flebbe (JIRA)" <ji...@apache.org> on 2018/06/06 20:27:00 UTC

[jira] [Resolved] (BIGTOP-3037) Download maven securely

     [ https://issues.apache.org/jira/browse/BIGTOP-3037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Olaf Flebbe resolved BIGTOP-3037.
---------------------------------
       Resolution: Fixed
    Fix Version/s: 1.3.0

> Download maven securely
> -----------------------
>
>                 Key: BIGTOP-3037
>                 URL: https://issues.apache.org/jira/browse/BIGTOP-3037
>             Project: Bigtop
>          Issue Type: Bug
>          Components: toolchain
>    Affects Versions: 1.2.1
>            Reporter: Olaf Flebbe
>            Assignee: Olaf Flebbe
>            Priority: Major
>             Fix For: 1.3.0
>
>         Attachments: 0001-BIGTOP-3037-Download-maven-securely.patch, BIGTOP-3037.3.patch
>
>
> There is now way to verify authenticity of maven download from the apache mirrors.
> But maven is available from maven central as well
> Maven central has the advantage being immutable. There is no need for looking for newest versions.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)