> looking at the url for maven central I was wondering if we should use https?
That would only accomplish making the download more private (ie the ISP wouldn't see you downloading this JAR) but since we check the hash there's no way to tamper the bits. --emi ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On 16 June 2018 1:16 AM, Sven Reimers <[email protected]> wrote: > Hi all, > > looking at the url for maven central I was wondering if we should use https? > > -Sven > > Jan Lahoda [email protected] schrieb am Fr., 15. Juni 2018, 22:11: > > > Hi, > > > > Thanks for the information. I suspect this may be caused by a local build > > > > of HTML4J, which installs the artifacts into the local .m2 storage, and > > > > these are then picked up by the NB build. I think I have an idea how to fix > > > > that, need to try it. > > > > Jan > > > > On Fri, Jun 15, 2018 at 6:10 PM, Josh Juneau [email protected] wrote: > > > > > Thanks for the responses on this issue. Indeed, it is a bad idea to > > > > > > modify hashes...that is my reason for starting this thread. > > > > > > It sounds like there is an issue with my local maven repository. I will > > > > > > start by troubleshooting there to see if I can repair. Thanks for > > > > > > checking > > > > > > the jar file to troubleshoot the issue. > > > > > > I appreciate your time and responses. > > > > > > Josh Juneau > > > > > > [email protected] > > > > > > http://jj-blogger.blogspot.com > > > > > > https://www.apress.com/index.php/author/author/view/id/1866 > > > > > > > On Jun 15, 2018, at 11:03 AM, Matthias Bläsing < > > > > > > > > [email protected]> wrote: > > > > > > > > Hi Josh, > > > > > > > > Am Freitag, den 15.06.2018, 10:41 -0500 schrieb Josh Juneau: > > > > > > > > > Thanks for the responses. Yes, after I clone, I simply run ant. I > > > > > > > > > > just performed a new clone to test the issue again, and here is > > > > > > > > > > example of the hash update: > > > > > > > > > > Download of B9BBF5BF22E1B8603F312F6E02ABC6267996B38A- > > > > > > > > > > net.java.html.boot.fx-1.5.1.jar produced content with hash > > > > > > > > > > BA6D811096540A6AA8C50131D9839F24BA130798 when > > > > > > > > > > B9BBF5BF22E1B8603F312F6E02ABC6267996B38A was expected > > > > > > > > > > In this case, I'd have to modify the binaries-list has to the > > > > > > > > > > expected hash and re-run the build. This occurs about 10 times, and > > > > > > > > > > then the build will complete successfully. > > > > > > > > > > If we are asking users to build from source, then I'd think that this > > > > > > > > > > manual hash update requirement should not be occurring. > > > > > > > > > > Thanks for your time and assistance...it is appreciated. > > > > > > > > this looks as if your local maven repository has broken artifacts. For > > > > > > > > your sample the full entry in the binaries list is: > > > > > > > > 9BBF5BF22E1B8603F312F6E02ABC6267996B38A org.netbeans.html:net.java. > > > > > > > > html.boot.fx:1.5.1 > > > > > > > > From the syntax the download tasks deduces, that it is a maven > > > > > > > > coordinate and tries to download the artifact from maven central. This > > > > > > > > leads here: > > > > > > > > http://repo1.maven.org/maven2/org/netbeans/html/net.java. > > > > > > > > html.boot.fx/1.5.1/ > > > > > > > > as no qualifier is specified, the unqualified jar is downloaded: > > > > > > > > http://repo1.maven.org/maven2/org/netbeans/html/net.java. > > > > > > > > html.boot.fx/1.5.1/net.java.html.boot.fx-1.5.1.jar > > > > > > > > I checked the jar: > > > > > > > > matthias@athena:~$ wget repo1.maven.org/maven2/org/ > > > > > > > > netbeans/html/net.java.html.boot.fx/1.5.1/net.java.html.boot.fx-1.5.1.jar > > > > > > > > --2018-06-15 18:00:00-- http://repo1.maven.org/maven2/ > > > > > > > > org/netbeans/html/net.java.html.boot.fx/1.5.1/net.java. > > > > > > > > html.boot.fx-1.5.1.jar > > > > > > > > Auflösen des Hostnamens repo1.maven.org (repo1.maven.org)… > > > > > > > > 151.101.112.209 > > > > > > > > Verbindungsaufbau zu repo1.maven.org (repo1.maven.org > > > > > > > > )|151.101.112.209|:80 > > > > > > > > … verbunden. > > > > > > > HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK > > > > > > > > Länge: 80886 (79K) [application/java-archive] > > > > > > > > Wird in »net.java.html.boot.fx-1.5.1.jar« gespeichert. > > > > > > > > net.java.html.boot.fx-1.5.1.jar 100%[========================= > > > > > > > > =================================================>] 78,99K --.-KB/s > > > > > > > > in 0,05s > > > > > > > > 2018-06-15 18:00:00 (1,63 MB/s) - »net.java.html.boot.fx-1.5.1.jar« > > > > > > > > gespeichert [80886/80886] > > > > > > > > matthias@athena:~$ sha1sum net.java.html.boot.fx-1.5.1.jar > > > > > > > > b9bbf5bf22e1b8603f312f6e02abc6267996b38a net.java.html.boot.fx-1.5.1. > > > > > > > > jar > > > > > > > > matthias@athena:~$ > > > > > > > > Ignoring casing, this agrees with my assessment. > > > > > > > > HTH > > > > > > > > Matthias > > > > > > > > To unsubscribe, e-mail: [email protected] > > > > > > > > For additional commands, e-mail: > > > > > > > > [email protected] > > > > > > > For further information about the NetBeans mailing lists, visit: > > > > > > > > https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
