You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@buildr.apache.org by "Damian Monogue (JIRA)" <ji...@apache.org> on 2011/07/07 22:00:18 UTC

[jira] [Created] (BUILDR-595) Add option to specifiy location of ca cert

Add option to specifiy location of ca cert
------------------------------------------

                 Key: BUILDR-595
                 URL: https://issues.apache.org/jira/browse/BUILDR-595
             Project: Buildr
          Issue Type: Improvement
          Components: Core features
    Affects Versions: 1.4.6
            Reporter: Damian Monogue


Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13062587#comment-13062587 ] 

Antoine Toulme commented on BUILDR-595:
---------------------------------------

Pending review from Marc-Andre who introduced the feature with BUILDR-592.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>              Labels: maven
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Reopened] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Damian Monogue (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Damian Monogue reopened BUILDR-595:
-----------------------------------


I believe I didn't properly convey the issue, as it's not ssh specific but was in fact run into when using maven repositories over https.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Resolved] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Antoine Toulme resolved BUILDR-595.
-----------------------------------

       Resolution: Fixed
    Fix Version/s: 1.4.7

Fixed with r1145787.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Alex Boisvert (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Boisvert updated BUILDR-595:
---------------------------------

    Fix Version/s:     (was: 1.4.7)
                   1.4.8
    
> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.8
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13062090#comment-13062090 ] 

Antoine Toulme commented on BUILDR-595:
---------------------------------------

This is possible actually, I'm adding that to the doc:

{code}
h3(#uploading-options). Uploading Options

For convenience, you can also pass "any option of Net::SSH":http://net-ssh.github.com/ssh/v2/api/index.html when configuring the remote repository.

If you need to enforce to use password-only authentication for example, you can set this option:

{% highlight ruby %}
# Set password authentication only
repositories.release_to[:auth_methods] = %w(password)
{% endhighlight %}
{code}

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>              Labels: maven
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Hudson (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064211#comment-13064211 ] 

Hudson commented on BUILDR-595:
-------------------------------

Integrated in Buildr-ci-build #243 (See [https://builds.apache.org/job/Buildr-ci-build/243/])
    BUILDR-595 Add option to specifiy location of ca cert

toulmean : 
Files : 
* /buildr/trunk/doc/packaging.textile
* /buildr/trunk/CHANGELOG


> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064167#comment-13064167 ] 

Antoine Toulme commented on BUILDR-595:
---------------------------------------

Actually, the correct syntax is:
{code}
repositories.release_to[:options] =  {:ssh_options=>{:auth_methods=> 'password'}}
{code}

Will fix my patch and commit it.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Damian Monogue (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064205#comment-13064205 ] 

Damian Monogue commented on BUILDR-595:
---------------------------------------

Thank you! Sorry about not being more clear.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Antoine Toulme reassigned BUILDR-595:
-------------------------------------

    Assignee: Antoine Toulme

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Alex Boisvert (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064195#comment-13064195 ] 

Alex Boisvert commented on BUILDR-595:
--------------------------------------

Does this also work for downloading from repositories?  Or is it only for uploading?

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064203#comment-13064203 ] 

Antoine Toulme commented on BUILDR-595:
---------------------------------------

OK, I'll take a look at our options for https.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064212#comment-13064212 ] 

Antoine Toulme commented on BUILDR-595:
---------------------------------------

That's fine. I stumbled on BUILDR-595 without looking at BUILDR-594.

I looked up the code and we would need to change it slightly to provide for ssl ca path support:
http://igarewa.tumblr.com/post/4266062400/verifying-ssl-certs-with-net-http-ca-path

For now you can edit lib/buildr/core/transports.rb around line 280 and add this line:
{code}
http.verify_mode = OpenSSL::SSL::VERIFY_PEER
http.ca_path = File.expand_path(File.join(File.dirname(__FILE__), 'certs'))
{code} 

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Damian Monogue (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13064198#comment-13064198 ] 

Damian Monogue commented on BUILDR-595:
---------------------------------------

I believe there may have been some confusion. I didn't mean SSH, but SSL. When using Ruby 1.9 and nexus maven repositories over https, it will not downloard nor upload because it cannot verify the authenticity of the certificate. If you could specify what CA cert to use to verify, then the problem would be alleviated. Sorry for any confusion.

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>            Assignee: Antoine Toulme
>              Labels: maven
>             Fix For: 1.4.7
>
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (BUILDR-595) Add option to specifiy location of ca cert

Posted by "Antoine Toulme (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/BUILDR-595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Antoine Toulme updated BUILDR-595:
----------------------------------

    Attachment: BUILDR-595.diff

> Add option to specifiy location of ca cert
> ------------------------------------------
>
>                 Key: BUILDR-595
>                 URL: https://issues.apache.org/jira/browse/BUILDR-595
>             Project: Buildr
>          Issue Type: Improvement
>          Components: Core features
>    Affects Versions: 1.4.6
>            Reporter: Damian Monogue
>              Labels: maven
>         Attachments: BUILDR-595.diff
>
>
> Need the ability to specify to Buildr where to look for the root CA certificate so that you can use certificate verification with ssl for remote repositories.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira