You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Stephen Dankbar (JIRA)" <ji...@codehaus.org> on 2010/11/03 14:31:03 UTC
[jira] Created: (MNG-4886) Conflicting log statements when using a
mirror
Conflicting log statements when using a mirror
----------------------------------------------
Key: MNG-4886
URL: http://jira.codehaus.org/browse/MNG-4886
Project: Maven 2 & 3
Issue Type: Improvement
Components: Logging
Affects Versions: 2.2.1, 2.0.11, 2.0.10
Environment: Windows XP, JDK 1.6.0_14, Maven version 2.0.10
Reporter: Stephen Dankbar
Priority: Minor
When using a mirror to replace a repository and Maven fails
to retrieve an artifact from the mirror, the log messages
conflict on the actual URL that the download attempt was to.
Example of this behavior is below.
09/29/10 21:12:43 /cm/somepath/project |[DEBUG] Trying repository central
09/29/10 21:12:43 /cm/somepath/project |Downloading:
https://somemirror.org:8081/nexus/content/groups/bncbuild/org/apache/felix/maven-bundle-plugin/2.0.1/maven-bundle-plugin-2.0.1.pom
09/29/10 21:12:43 /cm/somepath/project |[DEBUG] Unable to get resource 'org.apache.felix:maven-bundle-plugin:pom:2.0.1' from repository central (http://repo1.maven.org/maven2): Error transferring file
The second log statement indicates that the file was being downloaded
from somemirror.org. The last log statement conflicts with second, indicating
instead that the connection was to repo1.maven.org. Seeing an attempt to
download from a repository outside our firewall worries the security
folk at our company. The expected result would be for the log to
indicate the actual URL it is going to or at least indicate that
the repository's URL is being overridden by a mirror.
Investigation points to the problem log statement being
in org.apache.maven.artifact.manager.DefaultWagonManager.getArtifact(), line 341.
http://svn.apache.org/viewvc/maven/maven-2/tags/maven-2.2.0/maven-artifact-manager/src/main/java/org/apache/maven/artifact/manager/DefaultWagonManager.java
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MNG-4886) Conflicting log statements when using a
mirror
Posted by "Benjamin Bentmann (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-4886?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Benjamin Bentmann closed MNG-4886.
----------------------------------
Resolution: Fixed
Fix Version/s: 3.0
Assignee: Benjamin Bentmann
> Conflicting log statements when using a mirror
> ----------------------------------------------
>
> Key: MNG-4886
> URL: http://jira.codehaus.org/browse/MNG-4886
> Project: Maven 2 & 3
> Issue Type: Improvement
> Components: Logging
> Affects Versions: 2.0.10, 2.0.11, 2.2.1
> Environment: Windows XP, JDK 1.6.0_14, Maven version 2.0.10
> Reporter: Stephen Dankbar
> Assignee: Benjamin Bentmann
> Priority: Minor
> Fix For: 3.0
>
>
> When using a mirror to replace a repository and Maven fails
> to retrieve an artifact from the mirror, the log messages
> conflict on the actual URL that the download attempt was to.
> Example of this behavior is below.
> 09/29/10 21:12:43 /cm/somepath/project |[DEBUG] Trying repository central
> 09/29/10 21:12:43 /cm/somepath/project |Downloading:
> https://somemirror.org:8081/nexus/content/groups/bncbuild/org/apache/felix/maven-bundle-plugin/2.0.1/maven-bundle-plugin-2.0.1.pom
> 09/29/10 21:12:43 /cm/somepath/project |[DEBUG] Unable to get resource 'org.apache.felix:maven-bundle-plugin:pom:2.0.1' from repository central (http://repo1.maven.org/maven2): Error transferring file
> The second log statement indicates that the file was being downloaded
> from somemirror.org. The last log statement conflicts with second, indicating
> instead that the connection was to repo1.maven.org. Seeing an attempt to
> download from a repository outside our firewall worries the security
> folk at our company. The expected result would be for the log to
> indicate the actual URL it is going to or at least indicate that
> the repository's URL is being overridden by a mirror.
> Investigation points to the problem log statement being
> in org.apache.maven.artifact.manager.DefaultWagonManager.getArtifact(), line 341.
> http://svn.apache.org/viewvc/maven/maven-2/tags/maven-2.2.0/maven-artifact-manager/src/main/java/org/apache/maven/artifact/manager/DefaultWagonManager.java
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira