Hi,

it seems roller an uses older version of httpcore.jar, which is transitively loaded via spring-security-openid.jar.

See:
[INFO] +- org.springframework.security:spring-security-openid:jar:3.1.4.RELEASE:compile
[INFO] |  +- org.apache.httpcomponents:httpclient:jar:4.1.1:runtime
[INFO] |  |  \- org.apache.httpcomponents:httpcore:jar:4.1:runtime

This version is incompatible with org.springframework:spring-web:jar:3.2.4.RELEASE. This spring version needs httpcore 4.2.

The spring-security upgrade is a fix. It needs to be changed in pom.xml:
from
<spring.security.version>3.1.4.RELEASE</spring.security.version>
to
<spring.security.version>3.2.RELEASE</spring.security.version>

Let me note that I find this problem by a byte-code analyser we are developing (https://www.assembla.com/spaces/jacc/new_dashboard) and its maven plugin. I am not, however, able to determine whether this incompatibility is propagated directly somewhere to the roller/s user interface (causing runtime errors).

The detail of the bug is:

[ERROR] Filename: httpclient-4.1.1.jar
[ERROR]  Class: org.apache.http.client.methods.HttpPost
[ERROR]    Method: releaseConnection(0) (Not found)
[ERROR]    Imported by:
[ERROR] Class: org.springframework.remoting.httpinvoker.HttpComponentsHttpInvokerRequestExecutor
[ERROR]    File: spring-web-3.2.4.RELEASE.jar

- it means that the "releaseConnection()" method, invoked by Spring-web, is missing (this method has been added in mentioned httpcore 4.2).

I hope my observation helps.

--
Ing. Kamil Jezek, Ph.D.

Researcher, NTIS - New Technologies for Information Society
Department of Computer Science and Engineering
University of West Bohemia in Pilsen, CZ


http://www.linkedin.com/in/kamiljezek

Reply via email to